Full Breakdown
Iranian Dual-National Hacker Arrested in Montenegro Over $3.4 Billion U.S. Cyberattack Allegations
6/26/2026, 9:55:27 PM
Arrest in Kotor Marks End of International Manhunt
Montenegrin police, acting with the U.S. Federal Bureau of Investigation, detained a 39-year-old Iranian-Turkish dual national in Kotor, Montenegro, on 26 June 2026. The suspect faces a New York Southern District Court indictment for conspiracy to commit computer fraud, hacking and aggravated identity theft. Montenegro’s High Court in Podgorica will now consider his extradition to the United States.
Background: Iran-Linked Cyber Campaign Since 2013
Montenegrin authorities allege the detainee began a series of intrusions in 2013 that compromised more than 150 U.S. universities. Stolen academic data and account access were reportedly funneled to Iran’s Islamic Revolutionary Guard Corps and affiliated entities. In April 2026, U.S. cyber agencies warned of an intensified Iranian hacking campaign against critical infrastructure.
Timeline of Alleged Activities and Law-Enforcement Actions
- 2013: First hacking incidents against U.S. universities.
- 2013-2025: Ongoing attacks affecting >150 institutions, estimated $3.4 billion damage.
- April 2026: U.S. agencies issue public warning on Iranian cyber threats.
- 26 June 2026: Arrest in Kotor.
- June 2026: Extradition request sent to Podgorica High Court.
Scope of the Alleged Cyberattacks
The alleged campaign compromised over 150 U.S. universities, causing damage estimated at $3.4 billion, and allegedly granted the IRGC access to sensitive research and network credentials.
Implications for U.S. Cybersecurity and International Law Enforcement
The case highlights the necessity of international cooperation to combat state-sponsored cybercrime and the legal complexities of attributing attacks. A successful prosecution could deter future Iranian operations and reinforce extradition frameworks.
Official Statements & Responses
Montenegrin officials labeled the suspect a key figure in a massive hacking campaign. The New York indictment mirrors those charges. The FBI declined comment, while U.S. agencies reiterated their April warning on Iranian cyber threats.
Conflicting Reports & Gaps
The $3.4 billion loss estimate relies solely on police statements; independent verification is lacking. The FBI provided no comment, and no public evidence directly ties the suspect to the IRGC.
Verbatim Quotes
- “From 2013 onward, … he carried out massive hacking attacks … targeting more than 150 universities in the United States, causing damage estimated at over $3.4 billion,” — Montenegrin Police Directorate
- “The FBI was not immediately available for comment.” — FBI (statement)
- “In April, US cybersecurity, law enforcement, and ?intelligence agencies warned about an escalation of Iranian hacking campaigns targeting equipment across critical US infrastructure.” — US agencies
- “com The case will now go to a High Court judge in Montenegro’s capital of Podgorica for extradition proceedings, the police added.” — Montenegrin Police Directorate
What’s Next: Extradition Proceedings
Podgorica’s High Court will assess the extradition request in the coming weeks. If approved, the suspect will be transferred to the United States for trial; a court date has not yet been set.
