17 Iranians Charged in Cyber Theft Campaign Targeting U.S. Institutions

17 Iranians Charged in Cyber Theft Campaign Targeting U.S. Institutions

First seen 18 Aug 2026, 20:09 UTC CbsnewsJusticeAbcnewsMlexCnn+44 77.1

Article Content

Browse articles
ThreatCluster

The U.S. Department of Justice has unsealed a superseding indictment against 17 Iranian nationals linked to the Mabna Institute, alleging a coordinated cyber theft campaign on behalf of Iran's Islamic Revolutionary Guard Corps (IRGC). The hackers targeted 144 U.S.-based universities, 42 private sector companies, and five federal and state government agencies, stealing over 31 terabytes of academic data and intellectual property. The indictment expands on a previous case from 2018, which initially charged nine of the defendants. The hackers utilized methods such as spear phishing and password spraying to access email accounts, successfully breaching approximately 8,000 professor accounts. The campaign, which began in 2013, has significant implications for U.S. national security and economic interests. The DOJ is offering a $10 million reward for information leading to the capture of several defendants. The ongoing U.S.-Iran conflict adds urgency to these charges.

Key Points: • 17 Iranian nationals charged for cyber theft linked to the Mabna Institute. • Over 31 terabytes of data stolen from U.S. universities and government agencies. • The campaign utilized spear phishing and password spraying techniques.

Timeline

2013-01-01
Mabna Institute cyber campaign begins
The Mabna Institute starts targeting U.S. and foreign universities, stealing academic data.
Article 2
2018-03-01
Initial indictment of nine defendants
Nine individuals were charged for hacking campaigns targeting U.S. institutions, including the Labor Department.
Article 2
2026-08-18
New indictment unsealed
The DOJ announces new charges against 17 Iranians, revealing a broader network behind the cyber theft campaign.
Article 1