Israeli cybersecurity firm Gambit Security has attributed the March 2026 breach of the Los Angeles County Metropolitan Transportation Authority (LACMTA) to Iranian state-backed hackers working for Iran's Ministry of State Security (MOIS). A group calling itself Ababil of Minab claimed responsibility, presenting itself as a hacktivist collective, but Gambit says forensic evidence ties it to prior MOIS-linked campaigns. The group claimed to have stolen and deleted LACMTA data, with recovery taking weeks. This follows a pattern of Iran-linked fake hacktivist groups, including Handala, which hacked medical tech firm Stryker earlier in 2026. Iranian cyber activity has escalated following U.S. and Israeli airstrikes on Iran, with U.S. agencies warning of increased targeting of American critical infrastructure.
Sort: