U.S. Charges 17 Iranian Hackers in Global Intellectual Property Theft

U.S. prosecutors have charged 17 members of the Iran-based Mabna Institute for orchestrating a years-long, coordinated cyber-intrusion campaign. The operation targeted hundreds of academic and private institutions globally to siphon intellectual property for the Iranian government.

According to a 14-count superseding indictment from the U.S. Department of Justice, the campaign was vast in scope. The group targeted 144 U.S.-based universities and 178 foreign universities, alongside at least 42 U.S. private companies and 11 foreign private firms. In total, the Mabna Institute stole more than 31 terabytes of academic data and intellectual property. In a separate but related action, the Department of Justice charged Behzad Mesri with hacking into HBO’s computer systems, stealing proprietary data, and attempting to extort the company for approximately $6 million in Bitcoin.

State-Sponsored Espionage

The Mabna Institute has operated since at least 2013, conducting cyber operations on behalf of the Islamic Revolutionary Guard Corps (IRGC) and other Iranian entities. These operations were not random acts of hacking but were designed as a systematic effort to acquire sensitive intellectual property and academic research. By infiltrating these institutions, the institute sought to provide the Iranian government with strategic advantages derived from global research and development.

Implications for Global Security

This case underscores the escalating scale of state-sponsored cyber espionage and the evolving tactics of national intelligence services. The breadth of the targets—spanning hundreds of academic institutions and government agencies—demonstrates a calculated attempt to weaponize the open nature of academic research for national strategic gain. Furthermore, the attempt to extort HBO using cryptocurrency highlights how state-aligned actors are increasingly leveraging digital assets like Bitcoin to facilitate financial crimes and extortion.

The Path Forward

While the indictments mark a significant legal step, the challenge of apprehending the defendants remains high given their location within Iran. Security experts and government agencies will likely continue to monitor the Mabna Institute's infrastructure to prevent further breaches. The case serves as a warning to global research institutions and private firms regarding the persistence of state-sponsored threats targeting intellectual property. The scale of the theft suggests that the Iranian government viewed the acquisition of foreign academic research as a core pillar of its national security and technological advancement strategy, effectively outsourcing its R&D to stolen data.