Extradition and Arrest

An Iranian-Turkish man has been extradited to the U.S. from Montenegro over his alleged involvement in a $3.4 billion hacking scheme that affected numerous universities and companies across the country. The extradition took place on October 1 following an arrest by Montenegrin police at the FBI's request.

The suspect and 16 other individuals were indicted on wire and computer fraud charges and are expected to face proceedings in the U.S. Southern District of New York. The defendants are accused of being members of the Mabna Institute, an Iran-based organization linked to state-backed cyber operations.

Scale of the Attack

Beginning in 2013, the campaign allegedly compromised thousands of academic email accounts and exfiltrated over 31 terabytes of intellectual property and research data. The operation impacted hundreds of universities, private enterprises, and government agencies globally, generating billions of dollars in estimated damages.

Court documents allege that the perpetrators supplied stolen data and unauthorized network access directly to the Iranian government to support state organizations and the Islamic Revolutionary Guard Corps. The extradited suspect specifically allegedly tracked intrusion progress and formulated targeting lists.

This legal action represents an uncommon instance of an accused state-backed Iranian operative facing American judicial authorities. Iran's extensive cyber warfare apparatus has previously been implicated in infrastructure and municipal utility attacks globally.