Federal Authorities Charge 17 in Iran-Backed Hack of 100,000 Academics
Federal authorities charged 17 suspects in Iran-backed breach of 100,000 academic emails.
Why it matters: Cyber espionage targeting academics jeopardizes university intellectual property and legal compliance. Legal and compliance teams must understand risks tied to international cyber threats in research settings.
- On August 18, 2026, U.S. federal authorities indicted 17 individuals linked to Tehran-based Mabna Institute hacking ring.
- The group compromised over 100,000 academic email accounts, primarily from university professors globally.
- Mabna Institute has prior U.S. sanctions for cyber espionage targeting intellectual property in academia.
- Attorney General Merrick Garland highlighted the defendants’ coordinated multi-year hacking effort impacting U.S. government departments and corporations.
On August 18, 2026, federal authorities formally indicted 17 individuals connected to the Iran-based Mabna Institute. The indictment charges them with orchestrating a large-scale cyber espionage operation that compromised email accounts of more than 100,000 college professors worldwide.
The Mabna Institute, with a history of cyber espionage targeting universities, has been sanctioned by the U.S. government for prior efforts to steal intellectual property. This latest campaign reflects its sustained focus on academic research and sensitive data.
The hackers aimed to infiltrate universities internationally to extract confidential research and trade secrets. This operation underscores an ongoing threat from Iranian state-backed actors attempting to access high-value intellectual property through academia.
Attorney General Merrick Garland emphasized the broad scale of the threat, stating, "These defendants are alleged to have engaged in a coordinated, multi-year hacking campaign from Iran targeting more than a dozen American companies and the U.S. Treasury and State Departments." His remarks highlight the national security implications intertwined with academic targeting.
This indictment raises urgent cybersecurity concerns for universities, research institutions, and legal teams responsible for compliance with data protection requirements. Heightened vigilance and robust security measures are critical to counteract these sophisticated espionage tactics.
By the numbers:
- 17 individuals indicted — involved in Mabna Institute hacking ring
- 100,000+ academic email accounts compromised — scale of breach
- August 18, 2026 — date of federal indictment filing