Israeli researchers say Iran behind Los Angeles transit system attack
FILE-A general view of the Los Angeles downtown skyline with a view of mountains in the background at sunset from Kenneth Hahn State Recreation Area on October 15, 2025 in Los Angeles, California. (Photo by Luke Hales/Getty Images)
Iranian hackers were responsible for a computer breach in March that resulted in the Los Angeles’ transit system shutting down a portion of its network, Reuters reported, citing Israeli researchers.
The hackers allegedly stole roughly 700 gigabytes of emails, backups, and additional files from the Los Angeles County Metropolitan Transportation Authority (LACMTA).
RELATED: Stryker hit in suspected Iran-linked cyberattack
Reuters noted that Gambit Security, a Tel Aviv-based cybersecurity organization, explained to the news outlet that it located the stolen data after it was inadvertently revealed online.
It was later determined that a hacking operation tied to Tehran was apparently connected to the data breach.
LA Transit System attack
Dig deeper:
The breach at the Los Angeles County Metropolitan Transportation Authority was identified on March 16, officials said in a statement obtained by Reuters.
Digital security specialists have suspected Iranian involvement in the incident against LACMTA ever since Ababil of Minab, an obscure pro-Iran group, claimed responsibility for what happened.
Reuters reported that a few weeks later, Ababil appeared online, asserting that it allegedly scrubbed an enormous amount of data in a cyberattack, posting a video that reportedly showed the group storming through the Los Angeles transit system's network.
LA officials acknowledged that the violation didn’t disrupt the movement of trains or buses, but local news outlets reported that the breach affected some daily operations, including arrival screens and consumer transactions.
The Source: Information for this story was provided by Reuters, which obtained a statement from Los Angeles County Metropolitan Transportation Authority on the incident. This story was reported from Washington, D.C.