US Unseals Indictment Against 17 Iranians Linked to Mabna Institute for $3.4 Billion IP Theft

The U.S. Department of Justice unsealed an indictment on August 19, 2026, charging 17 Iranian nationals with orchestrating a years-long hacking-for-hire operation targeting American organizations. The group, known as the Mabna Institute, is accused of conducting cyber operations at the direction of the Iranian government to steal intellectual property and sensitive data.

According to the DOJ, the defendants conducted spear-phishing campaigns and brute-force attacks to gain unauthorized access to victim networks. The targets included hundreds of universities, government agencies, and private companies across the United States. The indictment alleges that the operations resulted in the theft of significant amounts of intellectual property and research data, with the DOJ estimating the total economic loss at $3.4 billion.

The charges were unsealed as part of a coordinated international law enforcement action. The DOJ has not disclosed specific technical details of the infrastructure used, but the indictment describes the methods employed to infiltrate systems and exfiltrate data. The accused operatives are based in Iran, and the case highlights the ongoing threat of state-sponsored cyber operations targeting intellectual property.

The DOJ has emphasized that the charges are based on the allegations in the indictment and that the involvement of the Iranian government remains an allegation. The disruption focus has been on legal indictment, sanctions, and disruption of the network infrastructure used by the group. Affected organizations are advised to review phishing defenses, enforce multi-factor authentication, and monitor for indicators of compromise associated with the Mabna Institute operations.