US Charges 17 Iranians in $3.4 Billion IP Theft Scheme

The U.S. Department of Justice announced charges against 17 Iranian nationals on March 14, 2024, for their alleged involvement in a widespread intellectual property theft scheme that amassed approximately $3.4 billion in stolen data. These individuals are accused of being members of the Mabna Institute, a hacking-for-hire company based in Iran. The scheme operated for several years, targeting a broad spectrum of American organizations across various sectors. The stolen data included sensitive intellectual property, research, and proprietary information, which was then allegedly sold to third parties, including the Iranian Revolutionary Guard Corps (IRGC).

The indictment details a sophisticated operation that exploited numerous vulnerabilities in the computer systems of universities, companies, and government agencies. The Mabna Institute is described as a significant player in the global cybercrime landscape, facilitating large-scale data exfiltration for profit and for intelligence gathering purposes. The charges include conspiracy to commit wire fraud, access device fraud, and aggravated identity theft, among other offenses. The U.S. government asserts that this operation represents one of the most significant intellectual property theft cases ever brought forward.

According to the Department of Justice, the stolen data encompassed a vast array of valuable information, including academic research, engineering blueprints, business plans, and sensitive personal data. This information was reportedly used to benefit Iran's own technological and economic development, as well as to generate illicit revenue for the Mabna Institute and its members. The investigation involved collaboration between multiple U.S. law enforcement agencies and international partners, highlighting the global nature of cyber threats and the need for coordinated responses.

The indictment further alleges that the Mabna Institute provided its services to a variety of clients, including state-sponsored entities and private individuals seeking to acquire stolen data. The scale of the operation and the value of the stolen intellectual property underscore the persistent threat posed by sophisticated cybercriminal organizations to national security and economic competitiveness. The U.S. government is seeking to disrupt these illicit activities and hold those responsible accountable through legal means, including asset forfeiture and potential extradition of the indicted individuals.