US Justice Department charges 17 Iranians over alleged cyberattacks on universities and companies

Wednesday 19 August 2026 - 19:05

By: Azzat Manal

US Justice Department charges 17 Iranians over alleged cyberattacks on universities and companies

The United States Department of Justice has unsealed an indictment against 17 Iranian nationals accused of carrying out a years-long cyber campaign targeting universities, businesses and government institutions in the United States and abroad.

According to the indictment, the suspects were allegedly linked to Iran’s Mabna Institute and conducted coordinated cyberattacks on at least 144 American universities, 178 foreign universities, 42 US companies and 11 foreign private companies. The alleged campaign also targeted five US federal and state government agencies and two non-governmental organisations.

US authorities say the operation resulted in the theft of more than 31 terabytes of academic research, intellectual property and other sensitive information. Thousands of employee email accounts were also allegedly compromised during the campaign.

The Justice Department alleges that the Mabna Institute carried out phishing operations against universities and companies through contracts with Iranian government and private entities, ultimately benefiting Iran’s Islamic Revolutionary Guard Corps. The case highlights the growing role of state-linked cyber operations in obtaining valuable academic research, technological information and intellectual property.

Federal prosecutors had previously charged nine of the defendants in 2018. The new indictment replaces the earlier case and expands the alleged network and scope of the operation, reflecting the continuation of the US investigation into the suspected cyber campaign.

US prosecutors said the updated charges demonstrate Washington’s determination to pursue individuals accused of conducting cyber operations against American institutions, regardless of how much time has passed since the alleged attacks.

If convicted, the defendants could face significant prison sentences. The charges include conspiracy to commit computer-related offences, as well as wire fraud and conspiracy to commit wire fraud, with potential penalties ranging from five to 20 years depending on the offence.

The US State Department has also offered rewards of up to $10 million for information that could help locate five of the defendants who remain at large.

The case underscores the increasing importance of cybersecurity for universities, research institutions and private companies, which have become frequent targets of sophisticated phishing and data-theft campaigns. It also illustrates the broader challenge facing governments as they attempt to protect intellectual property and sensitive information from state-linked cyber actors operating across international borders.