Full Breakdown
U.S. Justice Department Indicts 17 Iranians for State-Sponsored University Cyber-Theft Campaign
8/20/2026, 6:20:31 AM
Indictment Unveils Massive University Cyber-Theft Operation
On August 18, 2026, a 14-count superseding indictment was unsealed in Manhattan federal court charging 17 Iranian nationals affiliated with the Tehran-based Mabna Institute. Prosecutors allege the group conducted cyber intrusions from roughly 2013 through at least December 2017, targeting computer systems of 144 U.S. universities, 178 foreign universities, 42 U.S. private-sector companies, 11 foreign companies, five U.S. federal and state agencies, and two NGOs. The indictment claims the defendants stole more than 31 terabytes of academic research and compromised approximately 8,000 professor email accounts while attempting to access over 100,000 accounts worldwide.
Background & Context
U.S. authorities describe the operation as a “hacking-for-hire” service that contracted with the Islamic Revolutionary Guard Corps (IRGC) and other Iranian government and university clients. Nine of the defendants were previously charged in a 2018 indictment; the new filing adds eight additional individuals.
Data & Statistics
- Targeted institutions: 144 U.S. universities, 178 foreign universities.
- Compromised accounts: ~8,000 professor email accounts; >100,000 accounts marked for potential intrusion.
- Data exfiltrated: At least 31 terabytes of journals, theses, dissertations, e-books, and other research.
- Financial impact: U.S. universities spent more than $3.4 billion to replace the material; private-sector victims incurred tens of millions in remediation, with some estimates exceeding $20 million per organization.
- Additional targets: Employee email accounts at the U.S. Department of Labor, the Federal Energy Regulatory Commission, the states of Hawaii and Indiana, the United Nations, UNICEF, and a 2017 HBO hack that led to an attempted $6 million Bitcoin extortion.
Official Statements & Responses
Assistant Attorney General for National Security John A. Eisenberg and FBI Assistant Director James C. announced a $10 million reward for information leading to the location of five defendants.
Verbatim Quotes
- “The superseding indictment alleges that, at the behest of entities including the IRGC, these defendants hacked into universities and other research institutions worldwide, including the United States, stealing at least 31 terabytes of information and intellectual property of untold value.” — John Eisenberg
- “Today’s charges, which include eight additional defendants, reveal the broader network allegedly behind a sweeping, state-sponsored campaign to steal research and intellectual property from American universities, businesses, and government institutions,” — Jamie McDonald
Conflicting Reports & Gaps
Sources differ on the precise volume of stolen data: the Department of Justice cites “more than 31 terabytes,” while other filings reference “31.5 terabytes.” Both figures are presented as estimates in the indictment, and the exact amount remains unverified.
What’s Next
The indictment assigns the case to U.S. District Judge Jesse M. Furman. The State Department’s reward program remains active, and law-enforcement agencies continue to seek the whereabouts of the five most-wanted defendants. One defendant, Amir Barati, is already in custody in Montenegro pending extradition. Prosecutors indicate that additional investigations may uncover further actors linked to the network.
