Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC U.S. prosecutors expand Iran-related hacking cases to add 17 defendants
U.S. prosecutors have expanded a long-term investigation of Iran-related hacking cases to 17 defendants, including 6 newly charged individuals linked to the 2017 HBO data breach and the subsequent attempt to extort $6 million in Bitcoin. A second alternative indictment released by the Justice Department adds a high-profile media hacking case to a state-sponsored cyber theft operation that covers universities, businesses and government agencies.
What has changed in the expanded U.S. hacking case?
According to the Department of Justice, on August 18, 2026, the Department of Justice unblocked a second alternative indictment containing 14 charges, accusing 17 members of the Iran-based "Mabuna Institute" of committing cyber theft on behalf of the Islamic Revolutionary Guard Corps. The expanded indictment is almost twice the scope of the original indictment (nine Mabuna defendants were prosecuted in 2018) and integrates the originally separate HBO extortion case into a narrative related to the Islamic Revolutionary Guard Corps. All charges remain mere charges until confirmed in court.
Case structure
The second alternative indictment, which was unblocked on August 18, 2026, listed 14 charges, highlighting the breadth of the expanded case. The scale of the operation involved makes this case unique. Prosecutors said the targets of Operation Mabuna included 144 U.S. universities, 178 foreign universities, 42 U.S. companies, 5 U.S. federal or state agencies, as well as foreign companies and non-governmental organizations.
Why was the 2017 HBO data breach particularly eye-catching
The most well-known clue in the indictment is HBO. Prosecutors said the six new defendants were directly involved in the 2017 invasion of the media company, and Behzad Mesri had previously been charged separately in 2017 for the attack. The case in the former Southern District Court of New York remains the clearest window on the extortion mechanism. Documents from 2017 show that Mesri initially asked HBO for $5.5 million in Bitcoin, then increased the request, and eventually the stolen data was leaked online. Including a well-known media hacking case in a state espionage prosecution takes the case far beyond academia, linking a high-profile ransom plot to the same infrastructure that has quietly stolen research data for years.
Enlightenment of expanding cases for online law enforcement
The numbers highlight why prosecutors view this as a persistent and costly threat. CyberMaxx's summary of Justice Department documents showed that the operation breached approximately 8000 professor accounts and stole at least 31.5TB of data. Cleanup is also costly. Prosecutors said the victimized university spent approximately $20 million to investigate and fix the vulnerabilities, a figure that redefines espionage as a direct financial burden on the targeted institution. Practitioners should realize that these intrusions rely on identity information, not malware. "Harpoon phishing and password spraying require neither new types of malware nor the exploitation of undisclosed vulnerabilities," CyberMaxx researcher Connor Jackson wrote. He pointed out the long-lasting effectiveness of these low-tech methods in large-scale operations. The amount of money extorted by Bitcoin also coincided with a strong market background. Bitcoin's trading price that day was close to US$78,530, up about 5.3%. The Fear and Greed Index was 71, which was in the "greedy" range. The amount of extortion rose to $6 million in bitcoin, a reminder that the anonymity of cryptocurrencies has long been a common method of state-linked extortion, even as law enforcement is gradually catching up. With the list of defendants almost doubling and the HBO case now incorporated into a broader indictment, the Justice Department is signaling that cross-border cyber cases will continue to be investigated for years.
