A cyberattack that disrupted the transport system in Los Angeles in March has been attributed to Iranian hackers, according to Israeli cybersecurity researchers, against the backdrop of ongoing tensions between the United States and Iran.
The attackers reportedly stole at least 700 gigabytes of data from the Los Angeles County Metropolitan Transportation Authority, including emails, backups and other files, according to Tel Aviv‑based cybersecurity firm Gambit Security. Researchers said they identified stolen files that were accidentally posted online.
In a report published on Tuesday, the company said a series of digital traces linked the server where the data was found to a previous cyber campaign that Israeli researchers and officials have attributed to Tehran.
The Los Angeles transport authority did not respond to a request for comment. In a statement issued last month, it said the attack remained under investigation.
Responsibility for the breach had previously been claimed by the pro‑Iran group “Ababil of Minab.” The group’s name refers to an Israeli bombing of a girls’ school in the Iranian city of Minab, which reportedly caused numerous casualties.
Gambit, whose founders include veterans of Israel’s Unit 8200, said it has informed relevant authorities of its findings.
The attack was first detected on 16 March. Around two weeks later, the Ababil group appeared online and published material allegedly showing how the hackers infiltrated the transport authority’s systems.
Officials said the cyberattack did not affect train or bus operations. However, local media reported that some arrival display screens stopped working and passengers were unable to reload electronic tickets.
The same group has also claimed responsibility for cyberattacks on the South Florida RRI‑Rail transport system and the Saudi infrastructure company Unimac.
Iranian hackers have also been linked to other incidents, including a cyberattack on medical device company Stryker and the leak of personal emails belonging to FBI director Kash Patel.
According to recent reports, Iranian hackers are also suspected of interference targeting fuel pumps at petrol stations in the United States.
