Four anonymous sources became a completed Iranian attack in four days of aggregation

NBC News reported on September 2 that Iran had attempted cyberattacks against a range of United States infrastructure, and that the attempts had been unsuccessful so far. The sourcing was four people familiar with the matter. No named official appears in the report and no agency confirmed it on the record. Bloomberg Law’s write-up the same day added no independent sourcing, framing the story explicitly as NBC reporting citing four people familiar with the matter — a re-report rather than a second confirmation. The story was then carried by Mediaite, by Political Wire, by Joe.My.God and by Iran International, an outlet that is partisan on Iran coverage and should be read as such. Every one of those items traces back to the same single article and the same four unnamed people.

What changed in transit was the verb. NBC’s construction was attempted and unsuccessful. Political Wire’s headline told readers that Iran had launched cyberattacks on US infrastructure. That is the difference between a claim about intent and an assertion of a completed event, and it was crossed inside four days without any new reporting to justify it. Six days on from publication, as of Monday evening, the underlying assertion still rests on one outlet and four anonymous sources. The Files has seen no CISA advisory, no FBI statement and no named official attached to it. The gap between those two outcomes — an agency puts its name to this, or it stays where it is — is the thing worth watching this week.

Assessment: The propagation pattern here is more instructive than the underlying claim, which may well be true. A single-outlet, four-source national security story enters the aggregation layer with hedges intact and exits without them, because hedges cost headline space and nobody downstream carries the liability for the original reporting. Note also the incentive structure of the pickup: outlets hostile to Tehran gain from the strongest available reading, and the strongest available reading is the one that survives. Readers encountering this cycle on September 8 will meet it as current news. It is a six-day-old anonymous claim, and it has not been corroborated since.