Reported US sabotage of Iran's missile and space-launch supply chain (2019, report)
What happened
On 13 February 2019 the New York Times published a report by David Sanger and William Broad describing an accelerated covert US programme to sabotage Iran's missiles and rockets by inserting faulty parts and materials into Iran's aerospace supply chains, set against a period of Iranian space-launch failures. The reporting rests on anonymous sources; no technical account of any insertion is given, no specific launch failure is attributed to sabotage, and the US government has not confirmed the programme. Herb Lin of Stanford, writing on Lawfare six days later, characterised the accompanying Brookings book chapter as informed speculation about how a long-range missile development programme of a small, authoritarian and relatively impoverished nation might be compromised by cyber and other means, and noted that it does not address anything specific known to be actually happening but focuses on what might be possible.
A record of a report, not of an event, and the title says so. What is established is that the New York Times published this account on that date and what the account said; that any of it happened is not. The record is carried because supply-chain sabotage of launch programmes is a technique the regulatory framework contemplates and the public record almost never documents, so this is one of the few named citable instances of the allegation, and its evidentiary thinness is itself the useful fact. Two notes. The word cyberwar in the headline is not matched by the described mechanism, which is physical parts and materials, which is why IA-0001.01 is rejected. And unlike every other record in this batch the reported actor is a Western state and the target is outside Europe; that does not affect the mapping, because SPARTA techniques describe acts rather than the merits of the actor performing them.
Attack vector
Reported insertion of faulty parts and materials into an adversary state's aerospace supply chains prior to delivery, through the networks of suppliers and subcontractors selling into them. The New York Times, citing officials from both the Bush and Obama administrations, gives a small design change in a critical valve, a modest alteration in an engine part or guidance system and a contaminated alloy for launcher fins as illustrations of what would suffice, and records a government request to withhold the identities of specific suppliers.
Operational impact
None established. The report is set against a period of Iranian space-launch failures, but no source attributes any particular failure to sabotage.
Affected segments
supply_chain, launch
Disclosed
2019-02-13
SPARTA techniques evidenced
Each row is a technique this record evidences, with the reasoning and the source that attests to it.
What relationship, confidence, and evidence mean on the rows below
- Relationship
What kind of link this is between the technique and the target.
Mitigates: the target actively prevents, detects, or recovers from the technique.
Addresses: the target governs the technique or is relevant to it, without interdicting it. Most governance and policy obligations sit here.
Triggers obligation: the technique occurring is what triggers the duty the target imposes.
Relates to: related to the technique, but the target neither interdicts nor governs it. Used sparingly.
- Confidence
How strongly the source supports this mapping, not how severe the technique is.
High: the source supports the mapping squarely.
Moderate: supported, with a qualification such as a cross-tactic reading that stays operationally sound.
Low: the source reaches the technique only in part.
- Evidence
How close to the source text the mapping was made.
Direct: a verbatim excerpt of the cited source was read against the technique, and the rationale argues from that excerpt.
Derived: the mapping follows from the source's scope or structure, with no on-point excerpt addressing the technique.
Inferred: reached by composition through another framework, or by domain reasoning the source does not support on its face.
The reported mechanism is insertion of faulty parts and materials into aerospace supply chains prior to delivery, which is IA-0001.03's subject; the technique's description names substituting near-spec counterfeits and embedding parts that fail after specific environmental or temporal conditions. The New York Times is reported to describe this behaviour explicitly, but its host refuses retrieval and the article was not read for this record: the quoted phrase reaches it through the Lawfare note that cites and quotes the original. The evidence type is therefore derived rather than direct. Confidence is low because the account rests on anonymous sources, gives no technical detail, and has not been confirmed.
Launch failures destroy the vehicle, and the report is set against a period of Iranian space-launch failures. The edge is derived and low-confidence because no source attributes any particular failure to the reported programme; the causal link between the alleged sabotage and any observed loss is precisely what is unestablished.
Considered and not mapped
These techniques were considered for this record because a source, a related record or SPARTA's own catalogue pointed at them. Each was read against what the sources say and not mapped. The reason is given in full.
Parent of a mapped child.
The report describes physical parts and materials, not build toolchains. The word cyberwar reaches this record only through the source's stored title, which is the publisher's framing rather than a description of the mechanism.
No source describes gradual performance loss; the alleged effect is failure.
Not applicable: this concerns interference with another party's launch programme, not acquisition of launch services.
Sources
The published accounts this record rests on. The tier is SafeMode Space's own assessment of the source, and the reason for it is given beside it. What the tiers mean and how they are assigned: the source tiers.
A source is listed when a mapped technique rests on it, or when it disputes the account. One the curators read but neither cited nor recorded as disputing the record is not listed, so an absence here means neither is true rather than that nobody looked.
Tier 2: Named reporting by two established national-security correspondents at a paper of record. Tier 2 rather than tier 1 because the account rests entirely on anonymous sources and has not been confirmed by any government. Retrieved 2026-08-20 through a browser carrying a session, after HTTP 403 to a command-line client; the content in this record reached it through the Lawfare note that cites and quotes it. The publisher now serves a different headline from the one stored here.
Tier 2: Named commentary by a Stanford scholar on an established law-and-security site, written specifically about the primary. Authoritative on the caveat it supplies.
Every source SafeMode Space reproduces, and on what terms: sources and attribution.