The short version
- The Department of Justice charged seventeen individuals linked to the Mabna Institute with conducting a coordinated cyber theft operation.
- Alleged hackers compromised thousands of academic accounts and stole data valued at approximately $3.4 billion from US institutions.
- Officials are offering a ten million dollar reward for information leading to five fugitives involved in the scheme.
The United States Department of Justice has formally charged seventeen Iranian nationals with orchestrating a large-scale cyber espionage campaign aimed at stealing sensitive data from American universities and private sector companies. Federal prosecutors describe the operation as a sweeping, state-sponsored effort that targeted the intellectual property of US institutions over a period spanning several years. The indictment marks a significant escalation in the government's response to foreign cyber threats, highlighting the persistent vulnerability of academic and corporate networks to organized digital intrusion.
According to federal authorities, the hackers operated under the auspices of the Mabna Institute, an organization established in 2013 with the specific purpose of facilitating access to non-Iranian scientific resources for Iranian academic bodies. The group is accused of targeting computer systems at 144 American universities and 42 private firms since at least 2013. Officials state that the campaign continued until at least December 2017, during which time the perpetrators allegedly stole more than 31 terabytes of data. This stolen information includes academic research and proprietary intellectual property estimated to be worth approximately $3.4 billion.
The scope of the intrusion extended beyond higher education institutions. The Department of Justice reported that the Mabna Institute successfully compromised email accounts belonging to roughly 8,000 professors at US-based universities. Additionally, the group targeted another 178 academic institutions internationally and accessed employee email accounts from at least five US federal and state government agencies. Private sector targets included companies in Germany, Italy, Switzerland, Sweden, and the United Kingdom, indicating a global reach for the alleged espionage network.
Federal officials have linked these cyber operations directly to Iran's Islamic Revolutionary Guard Corps (IRGC). Assistant FBI Director James C. Barnacle Jr. characterized the attacks as a serious threat to national security, noting that they reflect a broader, organized effort to undermine US institutions and their global partners. The charges suggest that many of the intrusions were conducted on behalf of the IRGC as well as other Iranian government entities and university clients. This attribution underscores the strategic nature of the theft, which appears designed to bolster Iran's scientific and technological capabilities at the expense of Western nations.
The legal proceedings involve a mix of new and previously charged individuals. Nine of the seventeen defendants named in this indictment were already facing charges in a seven-count indictment filed in March 2018. The current announcement expands the scope of accountability, bringing additional members of the alleged network into the federal justice system. By charging these individuals, the Department of Justice aims to disrupt the operational capacity of the Mabna Institute and deter future cyber espionage activities against US interests.
In an effort to locate those still at large, the government has announced a reward of $10 million for information leading to the location of five alleged hackers-for-hire who have been charged but remain unapprehended. This financial incentive is part of a broader strategy to dismantle the infrastructure supporting these cyber operations. US Attorney Jamie McDonald for the Southern District of New York emphasized that cyber operations have become a central instrument of national power, warning of the dangerous impact such attacks have on both security and the economy.
The case highlights the ongoing challenges faced by institutions in protecting sensitive data from sophisticated state actors. The alleged theft of billions of dollars worth of intellectual property raises concerns about the long-term economic and strategic implications for US academia and industry. As federal agencies continue to investigate these breaches, the focus remains on identifying all participants in the network and recovering any stolen information that may still be accessible.
Looking ahead, the Department of Justice is expected to pursue further legal actions against individuals and entities involved in similar cyber campaigns. The charges serve as a public statement of intent to hold foreign actors accountable for digital intrusions that compromise national security. Institutions targeted by such attacks are likely to review their cybersecurity protocols more rigorously, recognizing the persistent threat posed by organized espionage groups backed by state resources.
Sources behind this briefing
Go to the original reporting
- BBC World↗US charges 17 Iranians over 'massive' cyber theft campaign
