Iranian government-backed hackers breached the Los Angeles transit system in a cyberattack that took weeks to recover from, according to an Israeli cybersecurity firm. The attackers operated under the fake hacktivist persona Ababil of Minab.
An Israeli cybersecurity firm attributed the Los Angeles transit system breach to Iran's government, identifying the attackers as operating behind a fabricated hacktivist identity called Ababil of Minab.
The breach represents part of a broader pattern of cyberattacks that emerged following the start of the war in Iran. The attackers have claimed responsibility for multiple data breaches using the same persona, suggesting a coordinated campaign rather than isolated incidents.
The LA transit system required weeks to fully recover from the attack, indicating significant disruption to operations and data systems. Details about the specific data compromised or the scope of the breach remain limited, though the extended recovery timeline suggests substantial damage.
Ababil of Minab had previously claimed credit for other data breaches, establishing a track record of attacks attributed to Iranian state actors. The use of a false hacktivist identity allows attackers to obscure their true origins while maintaining operational continuity across multiple targets.
The incident underscores vulnerabilities in critical infrastructure systems, particularly transportation networks that serve major metropolitan areas. Public transit systems manage sensitive operational data and passenger information, making them attractive targets for state-sponsored cyberattacks.
This attribution adds to documented cases of Iranian cyberattacks against U.S. infrastructure and organizations. Security experts have previously linked Iranian government-backed groups to attacks on various sectors including energy, healthcare, and technology.
The LA transit breach highlights ongoing tensions in the cyber domain as nations employ hacking campaigns to pursue political objectives. The extended recovery period reflects the operational challenges organizations face when responding to sophisticated state-sponsored attacks.
Authorities have arrested two alleged members of TeamPCP, a hacking group responsible for infecting over 1,000 organizations through supply-chain attacks.
A Georgia police officer used Flock surveillance technology to track the movements of his ex-partner and another officer after their affair ended, according to internal investigation records.
McKesson, a major healthcare and pharmaceutical distributor, confirmed a cybersecurity incident involving unauthorized access to third-party applications. Extortion group ShinyHunters claims responsibility for stealing 284 million patient data records.
Fraudsters are exploiting Microsoft Teams and similar enterprise chat apps to deceive Chinese users into sending large sums of money. The trend has sparked a wave of complaints across the region.