OpenWatch

Allied F-35 groundings: it is the sustainment chain, not a cyber attack. Explaining ODIN.

forum · crediblewar · 13 January 2026, 14:20

Seeing a lot of "US hacked the F-35" takes. That is not what happened and the real thing is worse.

The F-35 is not a plane you own. It is a plane you subscribe to. Three feeds keep a jet legal to fly:

1. **Mission Data Files.** Weekly. Tells the sensors what a threat emitter looks like in your region. Stale MDF = degraded threat library, immediately.
2. **Health management.** The maintenance system will not release an airframe until a cycle clears against the network. No handshake, no release.
3. **Crypto keys.** Rolling, NSA-issued. Mode 5 IFF and secure datalink participation depend on them.

Nobody hacked anything. Somebody in Ohio and Texas revoked five accounts.

The aircraft are fine. They are sitting on the ramp in perfect mechanical condition and they are not legal to launch. That is the entire event.

u/RedTailMx: Maintainer, not on the F-35 but adjacent. This matches everything I have heard. People imagine a big red button. It is a permissions table.

u/quiet_professional: The permissions table IS the big red button. That is the point everyone keeps missing. It was always the button. It just did not look like one, so nobody negotiated over it.

u/Delft_ir: Dutch here. Leeuwarden is grounded. What is not being said loudly enough: the aircraft still flying CAP over our own country this morning are Typhoons and Rafales from other people's air forces.

We spent a generation being told sovereignty in air power was an expensive luxury.

u/blackout_theory: Gripen too. The three "expensive luxury" programmes are the only ones with an unbroken sustainment chain inside the operator's own alliance.

Every export brochure written in the next ten years is going to have a slide about this week.

u/tuesday_analyst: Prediction: within 48 hours somebody senior says the word "unprecedented" and within 96 hours somebody says the word "sovereign." Then it stops being about aircraft.

u/mod_crediblewar: **Mod note.** Thread locked to sourced comments. We are removing all "kill switch" claims without a source, and all speculation about what else might have a remote dependency. Some of you are doing target development in a public forum.

Same day
microblog @grandma_wifi · civilian 13 Jan 2026 09:40

Eleanor

Sorry, a stupid question. Does "grounded" mean they are broken, or that someone has told them not to fly? I cannot work out from the news which one it is and they seem very different to me.

microblog @factcheck_anna · civilian 13 Jan 2026 09:58

Anna

Not a stupid question at all — it is THE question and the reporting is bad at it. They are not broken. Every one of those aircraft could take off right now. A safety system will not clear them because it cannot phone home to a server in the United States. So: …

microblog @rahul_blr · civilian 13 Jan 2026 11:05

Rahul

Every defence procurement committee on earth opened a new agenda item this morning and the item is one sentence long: "what in our inventory has a switch we do not own?" I do software. The answer is going to be "almost everything" and it is going to take four …

microblog @HardhatHank · civilian 13 Jan 2026 12:30

Hank R.

Serious question from someone who builds things for a living: if you were the Japanese or the Koreans this morning, would you sign the next order? Because I would not. And that is my industry. That is my town.