Full Report
The loss of Space Force capabilities during Operation Epic Fury in Iran has highlighted the need for the service to invest in disaggregating its ground-based space operations centers and new “tactical” electronic warfare (EW) centers both at home and abroad, according to one of the service’s top budget planners. “We’ve seen in Operation Epic Fury, for the first time,…
Analysis Summary
# Incident Report: Operation Epic Fury - Space Force Capabilities Loss
## Executive Summary
During Operation Epic Fury, U.S. Space Force capabilities were successfully targeted and destroyed by Iranian actors through a combination of kinetic and cyberspace activities. This incident represents the first time Space Force operational centers were compromised and neutralized in a high-intensity conflict. The outcome has forced a strategic shift in U.S. space operations toward disaggregated ground centers and mobile tactical Electronic Warfare (EW) units.
## Incident Details
- **Discovery Date:** May 2026 (Confirmed by service leadership)
- **Incident Date:** Circa May 2026
- **Affected Organization:** United States Space Force (USSF)
- **Sector:** Defense / Government
- **Geography:** Iran (OCONUS) and Continental United States (CONUS)
## Timeline of Events
### Initial Access
- **Date/Time:** Concurrent with the start of Operation Epic Fury.
- **Vector:** Hybrid warfare; combined cyber intrusions and kinetic targeting.
- **Details:** Adversaries utilized "cyberspace activity" to target ground-based space operations centers.
### Lateral Movement
- Details on lateral movement within the Secret/Top Secret networks are not publicly disclosed in the provided report; however, the impact reached both OCONUS (theaters of operation) and CONUS (domestic) ground assets.
### Data Exfiltration/Impact
- **Impact:** Complete destruction or loss of operational utility of specific space capabilities and ground mission centers.
### Detection & Response
- **Discovery:** Real-time during the escalation of conflict in Iran.
- **Response Actions:** Immediate review of the "Future Years Defense Program" (FYDP) and redirection of funds toward mobile, distributed systems.
## Attack Methodology
- **Initial Access:** Cyberspace operations targeting USSF ground architecture.
- **Persistence:** Not disclosed.
- **Privilege Escalation:** Not disclosed.
- **Defense Evasion:** Not disclosed.
- **Credential Access:** Not disclosed.
- **Discovery:** Reconnaissance of centralized ground-station vulnerabilities.
- **Lateral Movement:** Not disclosed.
- **Collection:** Not disclosed.
- **Exfiltration:** Not disclosed.
- **Impact:** **Kinetic/Cyber Destructive.** Simultaneous targeting of ground stations to blind or disable space-based assets.
## Impact Assessment
- **Financial:** Multi-billion dollar shift in upcoming budget cycles (re-implementing the 5-year Future Years Defense Program).
- **Data Breach:** Compromise of command and control (C2) integrity.
- **Operational:** "Destroyed" space capabilities; significant disruption to military operations in the Iranian theater.
- **Reputational:** Demonstrated vulnerability of centralized U.S. space infrastructure to a regional adversary.
## Indicators of Compromise
*Note: Technical IOCs are classified/undisclosed.*
- **Behavioral indicators:** Loss of signal from satellite ground stations; synchronized cyber-disruption coincident with kinetic strikes.
## Response Actions
- **Containment:** Shift to emergency backup systems and mobile units.
- **Eradication:** Not applicable (kinetic destruction mentioned).
- **Recovery:** Budgetary shift to fund "disaggregated" (distributed) operations centers.
## Lessons Learned
- **Centralization is a Liability:** Large, centralized "brick-and-mortar" operations centers are "too big to fail" and too easy to target.
- **Cyber-Kinetic Convergence:** Adversaries will use cyberattacks to soften defenses for kinetic strikes or vice versa.
- **Vulnerability of CONUS:** Domestic bases are no longer "sanctuaries" and can be targeted via cyber activity during overseas conflicts.
## Recommendations
- **Disaggregation:** Break up large ground stations into smaller, geographically dispersed nodes.
- **Tactical EW:** Invest in "tactical" electronic warfare centers that can move and deploy rapidly.
- **Resilience:** Prioritize distributed satellite command and control (C2) that does not rely on a single vulnerable entry point.