The Mabna Institute, founded in 2013 and affiliated with Iran's IRGC, conducted cyber intrusions against 144 US universities, 178 international universities, 42 US private companies, 11 foreign companies, five US government agencies, and at least two NGOs. The group targeted over 100,000 professors globally, successfully compromising about 8,000 email accounts to exfiltrate sensitive academic and research data across multiple disciplines. The stolen data was sold through affiliated companies, and the group also attempted extortion against HBO. The US DOJ has issued a 14-count superseding indictment against 17 members and is offering monetary rewards for information on five individuals. This activity represents a state-sponsored cyber espionage campaign focused on intellectual property theft and data exfiltration.

The Mabna Institute's operations resulted in the theft of over 31 terabytes of academic and intellectual property data, compromising thousands of professor email accounts and affecting hundreds of universities and organizations worldwide. This represents a significant loss of sensitive research data and intellectual property, potentially impacting academic and commercial research integrity and confidentiality. The group also engaged in extortion attempts against private companies, indicating financial and reputational risks to targeted entities.

This is a law enforcement and attribution announcement rather than a vulnerability with a patch or fix. No direct remediation or patch is applicable. Organizations should ensure robust email security, credential protection, and monitoring for unauthorized access to mitigate similar threats. The US government is actively pursuing the perpetrators through criminal charges and reward programs.