US Indicts 17 Iranian Hackers in 31TB Academic Data Breach

Post Views: 1

US charges 17 Iranian hackers over 31-terabyte academic data theft

Background of the Cyber Operation

The United States has filed charges against 17 individuals linked to Mabna Institute, an Iranian entity accused of conducting a prolonged cyber operation targeting academic institutions, private enterprises, and government agencies.

The Southern District of New York case introduces eight new defendants to a prior 2018 indictment that already named nine others. The Department of Justice alleges the group exfiltrated over 31 terabytes of academic data and intellectual property, affecting 144 U.S. universities, 178 international institutions, 42 U.S. private companies, 11 foreign firms, five U.S. federal or state agencies, and two non-governmental organizations.

Scope and Duration of the Attack

The operation, attributed to the Iranian Islamic Revolutionary Guard Corps and other state-affiliated entities, involved sustained cyber intrusions spanning from 2013 to at least December 2017. The campaign focused on harvesting academic materials including research papers, theses, dissertations, and books across disciplines such as science, engineering, medicine, and social sciences.

Methods and Impact

Attackers compromised approximately 8,000 professor accounts globally through targeted phishing campaigns, with the indictment noting the exploitation of over 100,000 accounts. Stolen data was resold via two platforms accessible to Iranian institutions, including a service allowing users to access compromised university library systems.

The operation extended beyond academia, with several defendants implicated in breaches of non-educational entities. These included the U.S. Department of Labor and the Federal Energy Regulatory Commission, which incurred remediation costs exceeding $20 million. HBO was also cited as a victim, with one defendant allegedly stealing internal data and attempting to extort $6 million in cryptocurrency.

Key Details of the Indictment

Four additional individuals in the latest indictment are connected to this incident. The U.S. government has launched a reward initiative offering up to $10 million for information leading to the capture of five defendants. Officials emphasized the enduring commitment to holding perpetrators accountable, stating that time does not shield cyber adversaries targeting U.S. interests.

If convicted, the accused could face up to 20 years in prison for wire fraud alone, alongside charges related to conspiracy, computer fraud, and identity theft. All defendants remain at large, with diplomatic tensions between the U.S. and Iran complicating potential arrests.

“Officials emphasized the enduring commitment to holding perpetrators accountable, stating that time does not shield cyber adversaries targeting U.S. interests.”

Conclusion

The case underscores the growing threat of state-sponsored cyber activities aimed at undermining academic and economic assets. The U.S. government continues to prioritize combating such threats through legal action and international collaboration.