How ‘attempted and unsuccessful' became ‘launched' in two days of aggregation
Six outlets picked up the NBC report without adding reporting. At least one dropped both qualifiers from the headline — and a large body of April-to-August material is separately circulating as if it were this week’s news.
The pickups can be graded. Iran International credited NBC explicitly and preserved “attempted”, “unsuccessful” and “unsophisticated”. Roya News in Jordan ran “attempted cyberattacks against critical US infrastructure: report”. Mediaite used “Reportedly Trying to Hack” and NewsNation, on 4 September, “reportedly trying to hack US infrastructure” — conditionality intact. Political Wire, on 2 September, headlined “Iran Launched Cyberattacks on U.S. Infrastructure”, dropping both the attempt and the failure. Joe.My.God ran “Iranian Hackers Target Array Of US Infrastructure”. None added original reporting. The distance between the first and last of these is the entire finding of the NBC piece: whether anything happened.
The larger distortion is chronological. The technical basis for most current “Iran is in US water systems” coverage is joint advisory AA26-097A on Iranian-affiliated actors exploiting programmable logic controllers — filed in CISA’s 2026-04 directory and last updated 22 July. Nothing new was issued in the window. The DOJ case charging 17 Iranian nationals over an alleged $3.4 billion intellectual-property theft campaign, with $10 million rewards offered for five of them, was announced around 20 August; it re-entered feeds on 1 September when the low-credibility site Expose-News republished the rewards element as though new. And two irreconcilable numbers on water utilities are being used interchangeably: the FBI investigating attacks in at least seven states, per NBC’s reporting, against CBS News roughly a month ago citing at least 12 states reporting attacks. Different scopes, different dates, both anonymously sourced.
Assessment: The honest shape of this week is one thinly sourced story, six aggregators inflating it, and months of older material mistaken for news. That asymmetry is the story, not a footnote to it. The seven-versus-twelve gap is the most useful diagnostic on the desk: nobody reconciles them because nobody has to — both are unnamed, both are plausible, and a number without a publisher and a date is functionally a rumour with a decimal point. Treat any figure in this file that arrives without both as unusable. The next real input is likelier to be an OT-focused vendor note than an official statement.