{"id":317,"date":"2026-05-26T16:13:17","date_gmt":"2026-05-26T16:13:17","guid":{"rendered":"https:\/\/sparkmedia.africa\/?p=317"},"modified":"2026-05-26T16:13:25","modified_gmt":"2026-05-26T16:13:25","slug":"iranian-hackers-los-angeles-transit-system","status":"publish","type":"post","link":"https:\/\/sparkmedia.africa\/?p=317","title":{"rendered":"Iranian Hackers Blamed for Massive Cyberattack on Los Angeles Transit System"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Security researchers have linked a major cyberattack on the <strong>Los Angeles County Metropolitan Transportation Authority (LACMTA)<\/strong> to hackers allegedly backed by the Iranian government, raising fresh concerns about escalating cyber warfare targeting critical infrastructure worldwide.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to a new report by Israeli cybersecurity startup <strong>Gambit Security<\/strong>, the breach, which occurred in March, was carried out by a hacking group known as <strong>Ababil of Minab<\/strong> \u2014 a group the company says is connected to Iran\u2019s Ministry of Intelligence and State Security (MOIS).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The cyberattack reportedly disrupted parts of Los Angeles\u2019 public transit network and forced authorities into weeks of recovery efforts to restore affected systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The development was first reported by <strong>Reuters<\/strong>, which cited findings from Gambit Security\u2019s investigation into the incident.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/industrialcyber.co\/wp-content\/uploads\/2024\/02\/2024.02.06-US-Treasury-Department-sanctions-six-Iranian-hackers-responsible-for-malicious-cyber-activities-on-critical-infrastructure-1024x683.jpg\" alt=\"US Treasury Department sanctions six Iranian hackers responsible for ...\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Hackers Claimed Responsibility for Attack<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Following the breach, a self-described hacktivist group calling itself <strong>Ababil of Minab<\/strong> publicly claimed responsibility for the cyberattack.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The group alleged that it infiltrated LACMTA\u2019s systems, stole sensitive data, and later deleted portions of it from the network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cybersecurity analysts believe the group\u2019s name carries symbolic meaning. \u201cAbabil of Minab\u201d reportedly references a deadly U.S. airstrike on a school in the Iranian city of Minab that killed more than 175 people, many of them children.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, Gambit Security dismissed the idea that the group was acting independently.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThey are not a new, standalone hacktivist crew as they claim,\u201d Gambit said in its report, arguing that forensic evidence strongly links the group to previous Iranian state-backed cyber operations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Cybersecurity Experts Trace Attack to Iranian Intelligence<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">According to the report, investigators found technical similarities between the Los Angeles transit system attack and earlier cyber campaigns previously attributed to Iran\u2019s intelligence agencies.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Gambit Security said its conclusions were based on forensic evidence, operational patterns, and intelligence previously identified by the <strong>Israel National Cyber Directorate<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The researchers also linked the same cyber infrastructure to attacks targeting organizations in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Israel<\/li>\n\n\n\n<li>Saudi Arabia<\/li>\n\n\n\n<li>Turkey<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Security experts warn that the incident reflects a growing trend in which nation-states use \u201chacktivist\u201d groups as fronts for government-sponsored cyber operations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Weeks of Recovery for Los Angeles Transit Network<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The attack reportedly caused serious operational disruptions within the Los Angeles transit system, one of the largest public transportation networks in the United States.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Although officials have not publicly disclosed the full scale of the damage, reports indicate that recovery efforts lasted several weeks as cybersecurity teams worked to secure systems and restore normal operations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">LACMTA has not released detailed information regarding whether commuter services were directly affected or whether customer data was compromised during the attack.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Growing Threat of Iranian-Linked Cyber Groups<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If Gambit Security\u2019s findings are confirmed, Ababil of Minab would join a growing list of cyber groups allegedly operating on behalf of the Iranian government while presenting themselves as independent activists.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cybersecurity researchers recently linked another Iran-aligned hacking group known as <strong>Handala<\/strong> to attacks against U.S. medical technology company <strong>Stryker<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That attack reportedly resulted in the wiping of thousands of company systems and employee devices earlier this year.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Experts say these groups are increasingly targeting transportation systems, healthcare networks, financial institutions, and government infrastructure as geopolitical tensions continue to rise globally.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Cybersecurity Concerns Continue to Rise<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The latest revelations have renewed concerns about the vulnerability of public infrastructure to foreign cyberattacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Transportation systems are considered high-value targets because disruptions can affect millions of people, interfere with emergency response systems, and create widespread economic consequences.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cybersecurity specialists are now calling for stronger international cooperation, increased investment in digital security infrastructure, and faster response mechanisms to defend critical public systems from future attacks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security researchers say Iranian-backed hackers were behind the cyberattack on the Los Angeles transit system that took weeks to recover from.<\/p>\n","protected":false},"author":5,"featured_media":318,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[120],"tags":[304,300,297,302,299,298,301,303],"class_list":["post-317","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech","tag-cyber-warfare","tag-cybersecurity-news","tag-iran-hackers","tag-iranian-cyberattack","tag-lacmta-hack","tag-los-angeles-cyberattack","tag-mois-hackers","tag-public-transit-hack"],"aioseo_notices":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Iranian Hackers Blamed for Los Angeles Transit System Cyberattack<\/title>\n<meta name=\"description\" content=\"Security researchers say Iranian-backed hackers were behind the cyberattack on the Los Angeles transit system that took weeks to recover from.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sparkmedia.africa\/?p=317\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Iranian Hackers Blamed for Los Angeles Transit System Cyberattack\" \/>\n<meta property=\"og:description\" content=\"Security researchers say Iranian-backed hackers were behind the cyberattack on the Los Angeles transit system that took weeks to recover from.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sparkmedia.africa\/?p=317\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-26T16:13:17+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-26T16:13:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sparkmedia.africa\/wp-content\/uploads\/2026\/05\/Iranian-Hacker.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"God&#039;scare\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"God&#039;scare\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/sparkmedia.africa\/?p=317\",\"url\":\"https:\/\/sparkmedia.africa\/?p=317\",\"name\":\"Iranian Hackers Blamed for Los Angeles Transit System Cyberattack\",\"isPartOf\":{\"@id\":\"https:\/\/sparkmedia.africa\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/sparkmedia.africa\/?p=317#primaryimage\"},\"image\":{\"@id\":\"https:\/\/sparkmedia.africa\/?p=317#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sparkmedia.africa\/wp-content\/uploads\/2026\/05\/Iranian-Hacker.jpg\",\"datePublished\":\"2026-05-26T16:13:17+00:00\",\"dateModified\":\"2026-05-26T16:13:25+00:00\",\"author\":{\"@id\":\"https:\/\/sparkmedia.africa\/#\/schema\/person\/749840c12cba2427fdbaf77951a7fbb5\"},\"description\":\"Security researchers say Iranian-backed hackers were behind the cyberattack on the Los Angeles transit system that took weeks to recover from.\",\"breadcrumb\":{\"@id\":\"https:\/\/sparkmedia.africa\/?p=317#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/sparkmedia.africa\/?p=317\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/sparkmedia.africa\/?p=317#primaryimage\",\"url\":\"https:\/\/sparkmedia.africa\/wp-content\/uploads\/2026\/05\/Iranian-Hacker.jpg\",\"contentUrl\":\"https:\/\/sparkmedia.africa\/wp-content\/uploads\/2026\/05\/Iranian-Hacker.jpg\",\"width\":1600,\"height\":900,\"caption\":\"Cybersecurity researchers link Iranian-backed hackers to a major breach of the Los Angeles transit system.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/sparkmedia.africa\/?p=317#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/sparkmedia.africa\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Iranian Hackers Blamed for Massive Cyberattack on Los Angeles Transit System\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/sparkmedia.africa\/#website\",\"url\":\"https:\/\/sparkmedia.africa\/\",\"name\":\"\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/sparkmedia.africa\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/sparkmedia.africa\/#\/schema\/person\/749840c12cba2427fdbaf77951a7fbb5\",\"name\":\"God'scare\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/sparkmedia.africa\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/0135b512f670aaaab92d97971570ca7408ac51818b6180f70baede9465fb50d6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/0135b512f670aaaab92d97971570ca7408ac51818b6180f70baede9465fb50d6?s=96&d=mm&r=g\",\"caption\":\"God'scare\"},\"url\":\"https:\/\/sparkmedia.africa?author=5\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Iranian Hackers Blamed for Los Angeles Transit System Cyberattack","description":"Security researchers say Iranian-backed hackers were behind the cyberattack on the Los Angeles transit system that took weeks to recover from.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sparkmedia.africa\/?p=317","og_locale":"en_US","og_type":"article","og_title":"Iranian Hackers Blamed for Los Angeles Transit System Cyberattack","og_description":"Security researchers say Iranian-backed hackers were behind the cyberattack on the Los Angeles transit system that took weeks to recover from.","og_url":"https:\/\/sparkmedia.africa\/?p=317","article_published_time":"2026-05-26T16:13:17+00:00","article_modified_time":"2026-05-26T16:13:25+00:00","og_image":[{"width":1600,"height":900,"url":"https:\/\/sparkmedia.africa\/wp-content\/uploads\/2026\/05\/Iranian-Hacker.jpg","type":"image\/jpeg"}],"author":"God'scare","twitter_card":"summary_large_image","twitter_misc":{"Written by":"God'scare","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/sparkmedia.africa\/?p=317","url":"https:\/\/sparkmedia.africa\/?p=317","name":"Iranian Hackers Blamed for Los Angeles Transit System Cyberattack","isPartOf":{"@id":"https:\/\/sparkmedia.africa\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sparkmedia.africa\/?p=317#primaryimage"},"image":{"@id":"https:\/\/sparkmedia.africa\/?p=317#primaryimage"},"thumbnailUrl":"https:\/\/sparkmedia.africa\/wp-content\/uploads\/2026\/05\/Iranian-Hacker.jpg","datePublished":"2026-05-26T16:13:17+00:00","dateModified":"2026-05-26T16:13:25+00:00","author":{"@id":"https:\/\/sparkmedia.africa\/#\/schema\/person\/749840c12cba2427fdbaf77951a7fbb5"},"description":"Security researchers say Iranian-backed hackers were behind the cyberattack on the Los Angeles transit system that took weeks to recover from.","breadcrumb":{"@id":"https:\/\/sparkmedia.africa\/?p=317#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sparkmedia.africa\/?p=317"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sparkmedia.africa\/?p=317#primaryimage","url":"https:\/\/sparkmedia.africa\/wp-content\/uploads\/2026\/05\/Iranian-Hacker.jpg","contentUrl":"https:\/\/sparkmedia.africa\/wp-content\/uploads\/2026\/05\/Iranian-Hacker.jpg","width":1600,"height":900,"caption":"Cybersecurity researchers link Iranian-backed hackers to a major breach of the Los Angeles transit system."},{"@type":"BreadcrumbList","@id":"https:\/\/sparkmedia.africa\/?p=317#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sparkmedia.africa\/"},{"@type":"ListItem","position":2,"name":"Iranian Hackers Blamed for Massive Cyberattack on Los Angeles Transit System"}]},{"@type":"WebSite","@id":"https:\/\/sparkmedia.africa\/#website","url":"https:\/\/sparkmedia.africa\/","name":"","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sparkmedia.africa\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/sparkmedia.africa\/#\/schema\/person\/749840c12cba2427fdbaf77951a7fbb5","name":"God'scare","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sparkmedia.africa\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/0135b512f670aaaab92d97971570ca7408ac51818b6180f70baede9465fb50d6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0135b512f670aaaab92d97971570ca7408ac51818b6180f70baede9465fb50d6?s=96&d=mm&r=g","caption":"God'scare"},"url":"https:\/\/sparkmedia.africa?author=5"}]}},"_links":{"self":[{"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=\/wp\/v2\/posts\/317","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=317"}],"version-history":[{"count":1,"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=\/wp\/v2\/posts\/317\/revisions"}],"predecessor-version":[{"id":319,"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=\/wp\/v2\/posts\/317\/revisions\/319"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=\/wp\/v2\/media\/318"}],"wp:attachment":[{"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=317"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=317"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sparkmedia.africa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=317"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}