Assertion Supported AI assessment confidence: 95% certainty 5/5 debate potential 3/5

Lynn: Stuxnet was not the first malware causing physical damage

Herb Lynn · a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room · Jan 2, 2019 · at 10:19

Herb Lynn, cybersecurity scholar at Stanford, discusses the historical precedent of computer malware causing physical damage prior to the Stuxnet attack on Iranian nuclear infrastructure.

0:00 / 0:04exact quote · 4.6s

▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark

“It did have physical consequences. It was certainly not by any means the first time.”

quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →

The claim, plainly

Stuxnet was not the first instance of computer malware causing physical damage.

a quote alone can be ambiguous, so this restates it with the references and context of the conversation around it resolved. AI-written; the tape below the player is the source.

Assessment

The resolution criteria states that the claim is settled if historical documentation shows at least one documented instance prior to Stuxnet (2010) where computer malware or a cyber attack resulted in physical damage, explicitly citing the 2000 Maroochy Shire sewage spill and the 2008 Łódź tramway incident as acceptable instances. Both incidents occurred prior to 2010 and resulted in physical damage/environmental contamination and derailment/property damage respectively.

In 2000, Vitek Boden used SCADA software and unauthorized radio commands to release 800,000 liters of raw sewage in Maroochy Shire, Australia, causing environmental damage and killing marine life.
In January 2008, a modified remote control was used to tamper with track switches in Łódź, Poland, derailing four trams and causing physical collisions.

Checked against

[1] mitre.org [2] hep.com.cn [3] odu.edu [4] stormshield.com [5] inl.gov [6] kymatio.com [7] researchgate.net [8] darkreading.com

pre 2010 cyber attacks causing physical damage malware "Refahiye pipeline blast" cyber attack 2008 2000 Maroochy Shire sewage spill cyber attack physical damage 2008 Lodz tramway cyber attack "cyber attack" "physical damage" before Stuxnet

assessed as of 2026-07-28

This assessment is an AI reading of a public statement, made against the cited references with the confidence shown. It can be wrong. The quote, the tape and the references are all on this page; if something is off, use report an error below. full disclaimer →

Mentioned

computer malware Stuxnet

⚑ Spot an error? Report it

More from Herb Lynn

Insight

Lynn: Reputational damage from cyber breaches is not unique

“What I was saying is that it's not new to cyber. ... No matter whatever stupid thing you do, it damages your brand.”

Herb Lynn Jan 2, 2019 ▶ 19:26 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room

Insight

Lynn: Cyber weapons span a continuum from mild annoyances to total destruction

“There has been a trend away from weapons that have a very large boom to weapons that have a much smaller boom. And there's a sense in which cyber weapons can do something with, just do an annoyance to somebody, to something that might, you know, destroy the en…”

Herb Lynn Jan 2, 2019 ▶ 2:44 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room

Assertion Not checkable as stated

Lynn: Nations increasingly recognize the high operational utility of cyber weapons

“Cyber weapons are the, are weapons that are eminently usable for a variety of purposes. And one of the most interesting things of the past 10 years is that nations are starting to wake up to this. They're starting to see that these weapons are enormously usabl…”

Herb Lynn Jan 2, 2019 ▶ 3:33 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room

Assertion Not checkable as stated

Lynn: Stuxnet alerted nation-states to physical cyber attacks

“I was totally wrong about that, because what it did was it woke states up, policymakers up, to the possibility that this was a possible, feasible thing to do.”

Herb Lynn Jan 2, 2019 ▶ 10:40 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room

Lynn: Stuxnet was not the first malware causing physical damage

More from Herb Lynn

Turn any episode into a week of clips.