Iranian Hackers Attacked Los_Angeles Transit
Analysis based on 19 articles · First reported May 26, 2026 · Last updated May 26, 2026
The attribution of the United States — Los Angeles Metro cyberattack to Iran increases geopolitical tensions, potentially leading to further cyber warfare and impacting the cybersecurity industry. Companies like Stryker Corporation and transportation systems face heightened risks, which could lead to increased investment in cybersecurity measures and potentially affect stock prices of targeted entities.
Israeli cybersecurity firm Gambit Security has attributed a disruptive cyberattack on the United States — Los Angeles Metro (LACMTA) in March to Iranian hackers, specifically the group Iran — Minab. The attack resulted in the theft of 700 gigabytes of data, including emails and backups, and disrupted some digital systems, though train and bus services continued. Gambit Security's report, based on forensic evidence, links the attack to a known Iranian-backed operation. This incident is part of a broader alleged campaign of cyber operations by Iranian groups since the escalation of conflict between Iran, the United States, and Israel. Other targets claimed by Iran — Minab include South Florida's Tri-Rail, vehicle tracking company Vyncs, Saudi infrastructure firm Unimac, and allegedly organizations in Israel and Turkey. Iranian hackers are also suspected of attacking Stryker Corporation and leaking emails of FBI Director Kash Patel. The United States — Federal Bureau of Investigation is coordinating responses to these incidents, raising concerns about the vulnerability of critical infrastructure to politically motivated cyberattacks.
Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.
Open Dashboard