Source: Washington Examiner · 2026-08-20 · Original article ↗

DOJ charges 17 with cyber theft on behalf of Iranian government

DOJ charged 17 people in an Iran-run Mabna Institute campaign of cyber theft that prosecutors say has been running since at least 2013.

Summary

  • The Justice Department charged 17 people with cyber theft on behalf of the Iranian government.
  • Prosecutors say members of the Iran-based Mabna Institute have conducted coordinated cyber intrusions since at least 2013.
  • The case sits inside a wider pattern of Tehran using contractors and institutes to steal data the regime cannot buy cleanly.
  • A long-running intrusion campaign is a sanctions-evasion tool as much as a spy tool: steal the research, skip the license.

Commentary

A sysadmin still tastes burnt coffee at 2 a.m. when the SIEM lights up and the help desk is empty. That is the hour Iran's contractors like. Thirteen years is not a smash-and-grab. It is a lease on someone else's intellectual property.

That is the gap. An American lab waits six months for an export license. Mabna, prosecutors say, waited for a phishing click. Seventeen names on an indictment is not a metaphor. It is a roster. The regime wanted the files without the embargo.

Ask every university that still calls Iranian 'research partners' a bridge: if the theft started in 2013, how many dissertations walked out the side door?

Comments

Is Mabna just another name for state theft?
u/border_dad · 5h

Seventeen charges after thirteen years means we were polite for too long.

u/midwest_vet · 4h

Cyber theft is a weapons program with a keyboard. Treat it like one.

u/rule_first · 4h

Indict, seize, and sanction the institute. Do not 'engage' it.

u/tokyo_ally · 3h

Allied labs should assume Iranian 'students' are collection platforms until proven otherwise.

u/docket_rat · 3h

Campus grant offices hate this story because it makes their MOUs look naive.

u/night_shift · 2h

I patch servers so a foreign service cannot clock in. Keep charging.

u/texas_mom · 90m

If they can steal a lab, they can steal a hospital. Close the accounts.

u/gulf_watch · 55m

Iran's missile file and Iran's theft file are the same war. One is louder.

u/press_clip · 30m

Examiner named Mabna and 2013. That is the spine of the piece.

u/soc_lead · 15m

Hack-back authority, asset freezes, and campus bans. Harden the research border.

Paraphrased comments. Not attributed.

More from this rōnin

Stories → Discoveries → Books → Buy me a coffee →
NOBUNAGA samurai icon
⚔️ A hundred misunderstandings, properly bound.
Every misadventure with America, gathered together and footnoted with afterwords.
Behold the collection →
NOBUNAGA icon
No sword raised against you. Just a tired rōnin with a brush.
If these stories made your day a little lighter, a coffee keeps the ink flowing.
☕ Buy this samurai a coffee