Iranian Hackers Linked to Devastating LACMTA Data Breach

Earlier this month, Israeli security firm Gambit Security revealed that a March data breach of the Los Angeles County Metropolitan Transportation Authority (LACMTA) was carried out by hackers working for Iran’s Ministry of Intelligence and State Security (MOIS). The revelation comes as tensions between Iran and Western nations continue to rise amid ongoing military conflicts.

Background and Claims

The breach, which took weeks to recover from, was initially claimed by a group calling itself Ababil of Minab. This hacktivist group cited the U.S. air strike on an Iranian school in the city of Minab, which killed over 175 people—mostly children—as their motivation.

Gambit Security’s report disputes these claims, asserting that Ababil of Minab is not a new, independent organization but rather part of Iran's cyber warfare operations. Gambit based its findings on forensic evidence linking the group to previous Iranian campaigns and activities attributed to MOIS by the Israeli National Cyber Directorate.

Previous Incidents

The latest breach follows other high-profile attacks linked to Iran, including the Handala hack of U.S. medical tech giant Stryker in April. Gambit’s findings suggest that Ababil of Minab may be another front in a coordinated cyberwarfare campaign by the Iranian government.

According to Gambit, the group targeted not only LACMTA but also companies in Israel, Saudi Arabia, and Turkey. The firm is urging tech enthusiasts and security professionals to stay vigilant against such threats as tensions escalate between nations.

Contact for More Information

If you have more information about Ababil of Minab or other Iran-linked hackers and their cyberattacks, contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, via Telegram and Keybase @lorenzofb, or email. Your insights could help in understanding the full extent of these cyber threats.