Iranian government-backed hackers breached the Los Angeles transit system in a cyberattack that took weeks to recover from, according to an Israeli cybersecurity firm. The attackers operated under the fake hacktivist persona Ababil of Minab.
An Israeli cybersecurity firm attributed the Los Angeles transit system breach to Iran's government, identifying the attackers as operating behind a fabricated hacktivist identity called Ababil of Minab.
The breach represents part of a broader pattern of cyberattacks that emerged following the start of the war in Iran. The attackers have claimed responsibility for multiple data breaches using the same persona, suggesting a coordinated campaign rather than isolated incidents.
The LA transit system required weeks to fully recover from the attack, indicating significant disruption to operations and data systems. Details about the specific data compromised or the scope of the breach remain limited, though the extended recovery timeline suggests substantial damage.
Ababil of Minab had previously claimed credit for other data breaches, establishing a track record of attacks attributed to Iranian state actors. The use of a false hacktivist identity allows attackers to obscure their true origins while maintaining operational continuity across multiple targets.
The incident underscores vulnerabilities in critical infrastructure systems, particularly transportation networks that serve major metropolitan areas. Public transit systems manage sensitive operational data and passenger information, making them attractive targets for state-sponsored cyberattacks.
This attribution adds to documented cases of Iranian cyberattacks against U.S. infrastructure and organizations. Security experts have previously linked Iranian government-backed groups to attacks on various sectors including energy, healthcare, and technology.
The LA transit breach highlights ongoing tensions in the cyber domain as nations employ hacking campaigns to pursue political objectives. The extended recovery period reflects the operational challenges organizations face when responding to sophisticated state-sponsored attacks.
Following recent hacks of AI models, companies are debating whether to move cybersecurity testing online. Proponents argue that internet-connected tests provide more accurate threat assessments.
France's tax administration fell victim to a significant security breach, exposing vulnerabilities in one of the country's most critical government systems. Details remain limited as authorities investigate the incident.
A large distributed denial-of-service attack has disrupted Norway's shared government digital infrastructure since Monday, affecting public sector services accessible to citizens.
Security researchers have released a new bootloader that exploits a privilege escalation vulnerability in the original Meta Quest headset, granting users full control and independence from Meta's servers and applications.