{"id":258,"date":"2026-05-26T14:14:18","date_gmt":"2026-05-26T14:14:18","guid":{"rendered":"https:\/\/trustedmovinggroups.com\/?p=258"},"modified":"2026-05-26T14:14:18","modified_gmt":"2026-05-26T14:14:18","slug":"iranian-hackers-responsible-for-los-angeles-transit-system-breach-israeli-researchers-say","status":"publish","type":"post","link":"https:\/\/trustedmovinggroups.com\/?p=258","title":{"rendered":"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say"},"content":{"rendered":"
\n

Iranian hackers were responsible for a disruptive computer breach in March that forced Los Angeles\u2019 transit system to shut down parts of its network, Israeli researchers say.<\/p>\n

Read more U.S. men\u2019s national team set to reveal World Cup roster Tuesday<\/a><\/p>\n

The saboteurs stole at least 700 gigabytes of emails, backups and other files from the Los Angeles County Metropolitan Transportation Authority (LACMTA), according to Gambit Security, a Tel Aviv-based cybersecurity firm that said it discovered the misappropriated data after it was inadvertently exposed online.<\/p>\n

<\/div>\n

In a report published Tuesday, the company said a digital trail of evidence tied the server where the data was discovered to a previously known hacking operation that Israeli officials and researchers attributed to Tehran.<\/p>\n

Iran\u2019s mission to the United Nations did not return messages seeking comment. Israel\u2019s National Cyber Directorate did not return messages.<\/p>\n

The Los Angeles transit authority didn\u2019t respond to questions about the findings. In a statement shared last month, its officials said they were working with law enforcement and cyber specialists as they brought their systems back online. \u201cAttribution is part of the investigation and we will not speculate,\u201d the statement said.<\/p>\n

Digital security specialists have suspected an Iranian hand in the operation against the LACMTA ever since responsibility was claimed by an obscure pro-Iran outfit calling itself Ababil of Minab. The group\u2019s name refers to the bombing of a girls\u2019 school in the Iranian city of Minab that officials there say killed more than 175 children and teachers, and its rhetoric and modus operandi are characteristic of self-styled vigilante hacker groups that U.S. and Israeli researchers allege are cutouts for Iranian spies.<\/p>\n

<\/div>\n

Eyal Sela, Gambit\u2019s director of threat intelligence, said a connection between Ababil and the Iranian state \u201chas been a working assumption.\u201d<\/p>\n

\u201cWhat our research adds is the forensic evidence to support it,\u201d he said.<\/p>\n

Gambit, a security startup founded in part by veterans of Unit 8200, Israel\u2019s equivalent of the U.S. National Security Agency, said it had alerted relevant authorities to its findings.<\/p>\n

Read more Starbucks struggles to quell outrage over \u2018Tank Day\u2019 ad campaign that evoked massacre in South Korea<\/a><\/p>\n

Ababil did not return messages left via a form on its website. The FBI said it was aware of the LACMTA incident and was \u201ccoordinating with partners in response.\u201d The FBI declined further comment. The U.S. civilian cyber defense body, the Cybersecurity and Infrastructure Security Agency, did not return messages seeking comment.<\/p>\n

The intrusion at LACMTA was detected around March 16, its officials said in their statement. About two weeks later, Ababil materialized online and claimed to have wiped an enormous amount of data in a destructive cyberattack, publishing a video that purported to show them rampaging through the transit system\u2019s network.<\/p>\n

Although Los Angeles transit officials said the breach did not interrupt circulation of trains or buses, local media said it disabled at least some arrival screens and prevented customers from putting money on their transit cards.<\/p>\n

<\/div>\n

Ababil also has claimed credit for hacks affecting South Florida\u2019s Tri-Rail commuter transit system, vehicle tracking company Vyncs, and Saudi infrastructure firm Unimac.<\/p>\n

In a statement, Tri-Rail confirmed it had been hacked \u201cabout a month ago,\u201d but said that none of the affected data was critical. Vyncs owner Agnik said it had detected its breach on April 2 but declined to comment on the nature of the data stolen by the hackers. Both Tri-Rail and Agnik said the FBI was involved, with Agnik saying in an email that the bureau \u201chas a pretty good understanding of who these criminals are.\u201d Unimac did not return messages seeking comment.<\/p>\n

The group behind Ababil has hacked other organizations whose identity it has not publicized, Gambit Security said, citing its analysis of other data left online by the spies. Sela said they included a media organization and educational institution in Israel and an insurance brokerage in Turkey, but he declined to identify them further.<\/p>\n

Iranian hackers allegedly have carried out a drumbeat of digital operations since the U.S. and Israel launched a war against Iran in late February, including a damaging attack on the medical device company Stryker and the leak of personal emails belonging to FBI Director Kash Patel. Iranian hackers also are suspected of having remotely tampered with fuel gauges at gas stations, CNN reported earlier this month.<\/p>\n

Read more Trump\u2019s oozing influence in the Texas primary runoffs and U.S. revives strikes in Iran: Morning Rundown<\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Iranian hackers were responsible for a disruptive computer breach in March that forced Los Angeles\u2019 transit system to shut down parts of its network, Israeli researchers say<\/p>\n","protected":false},"author":1,"featured_media":257,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[],"class_list":["post-258","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iran-war"],"yoast_head":"\nIranian hackers responsible for Los Angeles transit system breach, Israeli researchers say - Trusted Moving Group<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/trustedmovinggroups.com\/?p=258\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say - Trusted Moving Group\" \/>\n<meta property=\"og:description\" content=\"Iranian hackers were responsible for a disruptive computer breach in March that forced Los Angeles\u2019 transit system to shut down parts of its network, Israeli researchers say\" \/>\n<meta property=\"og:url\" content=\"https:\/\/trustedmovinggroups.com\/?p=258\" \/>\n<meta property=\"og:site_name\" content=\"Trusted Moving Group\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-26T14:14:18+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/#\\\/schema\\\/person\\\/98cd83efb686ecde03e082abca618eaa\"},\"headline\":\"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say\",\"datePublished\":\"2026-05-26T14:14:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258\"},\"wordCount\":757,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/trustedmovinggroups.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/7c07d66fbf1e6a01fd5775dbb885927c.webp\",\"articleSection\":[\"Iran war\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258\",\"url\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258\",\"name\":\"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say - Trusted Moving Group\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/trustedmovinggroups.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/7c07d66fbf1e6a01fd5775dbb885927c.webp\",\"datePublished\":\"2026-05-26T14:14:18+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/#\\\/schema\\\/person\\\/98cd83efb686ecde03e082abca618eaa\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258#primaryimage\",\"url\":\"https:\\\/\\\/trustedmovinggroups.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/7c07d66fbf1e6a01fd5775dbb885927c.webp\",\"contentUrl\":\"https:\\\/\\\/trustedmovinggroups.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/7c07d66fbf1e6a01fd5775dbb885927c.webp\",\"width\":1200,\"height\":630},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?p=258#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/trustedmovinggroups.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/#website\",\"url\":\"https:\\\/\\\/trustedmovinggroups.com\\\/\",\"name\":\"Trusted Moving Group\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/trustedmovinggroups.com\\\/#\\\/schema\\\/person\\\/98cd83efb686ecde03e082abca618eaa\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"http:\\\/\\\/trustedmovinggroups.com\"],\"url\":\"https:\\\/\\\/trustedmovinggroups.com\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say - Trusted Moving Group","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/trustedmovinggroups.com\/?p=258","og_locale":"en_US","og_type":"article","og_title":"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say - Trusted Moving Group","og_description":"Iranian hackers were responsible for a disruptive computer breach in March that forced Los Angeles\u2019 transit system to shut down parts of its network, Israeli researchers say","og_url":"https:\/\/trustedmovinggroups.com\/?p=258","og_site_name":"Trusted Moving Group","article_published_time":"2026-05-26T14:14:18+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/trustedmovinggroups.com\/?p=258#article","isPartOf":{"@id":"https:\/\/trustedmovinggroups.com\/?p=258"},"author":{"name":"admin","@id":"https:\/\/trustedmovinggroups.com\/#\/schema\/person\/98cd83efb686ecde03e082abca618eaa"},"headline":"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say","datePublished":"2026-05-26T14:14:18+00:00","mainEntityOfPage":{"@id":"https:\/\/trustedmovinggroups.com\/?p=258"},"wordCount":757,"commentCount":0,"image":{"@id":"https:\/\/trustedmovinggroups.com\/?p=258#primaryimage"},"thumbnailUrl":"https:\/\/trustedmovinggroups.com\/wp-content\/uploads\/2026\/05\/7c07d66fbf1e6a01fd5775dbb885927c.webp","articleSection":["Iran war"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/trustedmovinggroups.com\/?p=258#respond"]}]},{"@type":"WebPage","@id":"https:\/\/trustedmovinggroups.com\/?p=258","url":"https:\/\/trustedmovinggroups.com\/?p=258","name":"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say - Trusted Moving Group","isPartOf":{"@id":"https:\/\/trustedmovinggroups.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/trustedmovinggroups.com\/?p=258#primaryimage"},"image":{"@id":"https:\/\/trustedmovinggroups.com\/?p=258#primaryimage"},"thumbnailUrl":"https:\/\/trustedmovinggroups.com\/wp-content\/uploads\/2026\/05\/7c07d66fbf1e6a01fd5775dbb885927c.webp","datePublished":"2026-05-26T14:14:18+00:00","author":{"@id":"https:\/\/trustedmovinggroups.com\/#\/schema\/person\/98cd83efb686ecde03e082abca618eaa"},"breadcrumb":{"@id":"https:\/\/trustedmovinggroups.com\/?p=258#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/trustedmovinggroups.com\/?p=258"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/trustedmovinggroups.com\/?p=258#primaryimage","url":"https:\/\/trustedmovinggroups.com\/wp-content\/uploads\/2026\/05\/7c07d66fbf1e6a01fd5775dbb885927c.webp","contentUrl":"https:\/\/trustedmovinggroups.com\/wp-content\/uploads\/2026\/05\/7c07d66fbf1e6a01fd5775dbb885927c.webp","width":1200,"height":630},{"@type":"BreadcrumbList","@id":"https:\/\/trustedmovinggroups.com\/?p=258#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/trustedmovinggroups.com\/"},{"@type":"ListItem","position":2,"name":"Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say"}]},{"@type":"WebSite","@id":"https:\/\/trustedmovinggroups.com\/#website","url":"https:\/\/trustedmovinggroups.com\/","name":"Trusted Moving Group","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/trustedmovinggroups.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/trustedmovinggroups.com\/#\/schema\/person\/98cd83efb686ecde03e082abca618eaa","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","caption":"admin"},"sameAs":["http:\/\/trustedmovinggroups.com"],"url":"https:\/\/trustedmovinggroups.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=\/wp\/v2\/posts\/258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=258"}],"version-history":[{"count":0,"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=\/wp\/v2\/posts\/258\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=\/wp\/v2\/media\/257"}],"wp:attachment":[{"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/trustedmovinggroups.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}