A major cyber attack disables critical infrastructure in the United States before the end of 2026.

Question

Six frontier AI models put this at 8% by 20 Mar 2027. Full reasoning from every model.

WillHappen.ai · Accepted Answer

8% — the median of 6 frontier models, resolving by 2027-03-20.

Answer

Gemini (Google): 3% — The threshold requires a disaster declaration or multi-state outage, an outcome no hostile cyber operation in the US has ever triggered. With barely 100 days remaining before 2027, the historical base rate for attacks reaching this severity is virtually zero. Colonial Pipeline caused panic but avoided a major disaster declaration, and critical grid operators maintain manual overrides. Only a sudden geopolitical rupture prompting Volt Typhoon or Russian state actors to trigger pre-positioned destructive malware would change this.

Answer

Claude (Anthropic): 9% — Turns on whether a Volt Typhoon-style intrusion crosses from access to a disruptive, multi-state kinetic effect. No US cyberattack has yet caused a declared major disaster or multi-state utility outage despite years of intrusions into grid/water systems (Volt Typhoon, Colonial… Threat actors (China, Russia, Iran-linked groups, ransomware crews) have demonstrated access and intent but historically favor espionage/pre-positioning over triggering… A Taiwan crisis, major escalation with Russia/Iran, or a ransomware group hitting multiple utilities simultaneously would sharply raise odds; absent that, base rate for…

Answer

GPT (OpenAI): 18% — It turns on whether persistent intrusions convert into a rare, sustained multi-state outage before year-end. CISA, utilities, and state regulators must fail to contain an attack severe enough to trigger FEMA-scale disaster action. Ransomware and intrusions are common, but declared cyber major disasters and multi-state utility failures remain rare precedents. Evidence of coordinated pre-positioning against grid or water operators, especially tied to a state crisis, would raise this sharply.

Answer

Grok (xAI): 7% — A state or criminal actor must produce a FEMA-declared disaster or multi-state utility outage in the remaining 101 days. No cyber incident has ever met that bar in the US; Colonial Pipeline and later ransomware hits stayed below it. Adversaries would have to launch and the effects materialize before 31 Dec 2026 with no public signs of an imminent campaign. A sudden Taiwan or Iran kinetic-plus-cyber escalation would raise odds, but current posture does not show that.

Answer

DeepSeek (DeepSeek): 12% — The odds hinge on whether a state or criminal actor can turn persistent access into a sustained, multi-state outage in the next 15 months. CISA and FBI have disrupted or preempted several high-profile campaigns since 2024, and no US cyber incident has yet met the 'major disaster' threshold. The 2021 Colonial Pipeline and 2023 Volt Typhoon cases show that even severe intrusions rarely cause sustained multi-state outages, keeping the base rate low. A successful attack on a regional grid operator or a coordinated ransomware strike on multiple water utilities would be the clearest path to a yes.

Answer

Qwen (Alibaba): 7% — Requires a declared major disaster or multi-state utility disruption from a cyber attack within ~3 months—no precedent for this threshold being met. Colonial Pipeline (2021) caused multi-state fuel disruption but never triggered a formal major disaster declaration; the bar here is higher than any prior US cyber… State actors (China's Volt Typhoon, Russian GRU) have pre-positioned in OT networks, but executing a disruption large enough to cross the 'declared major disaster'… Only a dramatic shift—such as a confirmed Chinese or Russian kinetic-scale attack on the power grid during a geopolitical crisis—would move this above 15%.

A major cyber attack disables critical infrastructure in the United States before the end of 2026.

A major cyber incident causes over $1 billion in direct economic damages worldwide before the end of 2026.

The United States announces the end or suspension of its naval blockade of Iran by September 30, 2026.

Saudi Arabia and the Houthis announce a formal ceasefire agreement.

Officials meeting in Paris announce an agreed post-UNIFIL security transition plan for southern Lebanon.