Federal prosecutors in the United States have unsealed charges against seventeen individuals from Iran accused of orchestrating a vast, multi-year cyber espionage campaign. The operation, allegedly conducted by members of the Iran-based Mabna Institute, systematically targeted the digital infrastructure of 144 American universities and 42 private sector companies, beginning as early as 2013 and continuing until at least December 2017.

The scale of the alleged theft is staggering, with prosecutors claiming the group illicitly acquired over 31 terabytes of academic data and valuable intellectual property. The estimated value of this stolen data is pegged at approximately $3.4 billion. This extensive operation not only compromised academic research but also targeted employee email accounts within at least five U.S. federal and state government agencies, as well as numerous international academic institutions and foreign companies.

Officials described the coordinated cyber attacks as a significant threat to national security. It is alleged that many of these intrusions were carried out on behalf of Iran’s Islamic Revolutionary Guard Corps (IRGC) and other Iranian governmental and academic entities. The Department of Justice highlighted that this operation exemplifies a broader, state-backed effort to undermine U.S. institutions and its global partners through cyber means. In response, the U.S. Department of Justice announced a reward of up to $10 million for information leading to the apprehension of five of the accused hackers-for-hire.

Key Takeaways

• Seventeen Iranians have been charged in the U.S. for a large-scale cyber theft campaign targeting academic and private sector entities.
• The operation allegedly stole over 31 terabytes of data and intellectual property valued at $3.4 billion.
• The U.S. Department of Justice is offering a $10 million reward for information on five of the accused individuals.

Editor’s Analysis & Impact

This indictment underscores the escalating sophistication and reach of state-sponsored cyber operations. The targeting of academic institutions and private companies highlights a strategic effort to acquire intellectual property and sensitive data for national advantage. The significant value of the stolen data and the involvement of entities like the IRGC suggest a well-funded and organized operation. This case serves as a stark reminder of the persistent threats in cyberspace and the critical need for robust cybersecurity measures across both public and private sectors. The substantial reward offered indicates the U.S. government’s commitment to pursuing those responsible and deterring future attacks.

Frequently Asked Questions

Q: What was the Mabna Institute?
A: The Mabna Institute is an Iran-based organization that U.S. prosecutors allege was founded in 2013 to facilitate the theft of non-Iranian scientific resources and intellectual property from academic and private sector entities.

Q: What kind of data was stolen?
A: The stolen data primarily consisted of academic research, intellectual property, and sensitive information from university systems, private companies, and government agencies. Over 31 terabytes of data were reportedly compromised.

Q: What is the U.S. government doing about this?
A: The U.S. Department of Justice has charged seventeen Iranian individuals in connection with the cyber theft campaign. They have also announced a $10 million reward for information leading to the capture of five of the accused hackers.