# LACMTA Responds to Iranian Cyberattack

In March 2026, the Los Angeles County Metropolitan Transportation Authority (LACMTA) suffered a significant cyber breach attributed by Israeli cybersecurity researchers to the Iranian-linked hacking group Ababil of Minab. The attack resulted in the theft of at least 700 gigabytes of sensitive data and caused partial network shutdowns that disrupted transit operations for several weeks. This incident underscores the persistent cybersecurity threats facing U.S. critical infrastructure, particularly in public transit systems, and highlights the urgent need for enhanced cybersecurity measures and collaboration among local agencies, federal partners, and private sector contractors.

- **Why this matters:** Transit agencies and government contractors specializing in cybersecurity should prioritize strengthening defenses against state-sponsored cyber threats targeting critical infrastructure.
- The involvement of federal entities such as the FBI and CISA indicates potential for increased federal support and funding opportunities for cybersecurity enhancements in transit systems.
- Companies offering advanced threat intelligence, incident response, and infrastructure protection services may find new procurement opportunities with LACMTA and other transit authorities.
- Organizations should consider integrating forensic evidence capabilities and continuous monitoring solutions to mitigate risks from sophisticated adversaries like Ababil of Minab.

**Jurisdictions:** sled
**Industries:** Transportation, Public Safety
**Topics:** Cybersecurity, Digital Infrastructure
**Published:** May 26, 2026

### Government Entities
- Los Angeles County Metropolitan Transportation Authority (LACMTA)
- Federal Bureau of Investigation (FBI)
- Cybersecurity and Infrastructure Security Agency (CISA)
- Israel National Cyber Directorate
- Iran Ministry of Intelligence and State Security (MOIS)

### Vendors
- Gambit Security (cybersecurity firm)

### Key Quotes
> What our research adds is the forensic evidence to support it.
> — Eyal Sela, Director of Threat Intelligence, Gambit Security

### Sources
- [Iranian Hackers Responsible for Los Angeles Transit System Breach, Israeli Researchers Say](https://www.usnews.com/news/world/articles/2026-05-26/iranian-hackers-responsible-for-los-angeles-transit-system-breach-israeli-researchers-say) - U.S. News & World Report
- [Iranian hackers blamed for breach of Los Angeles transit system that took weeks to recover | TechCrunch](https://techcrunch.com/2026/05/26/iranian-hackers-blamed-for-breach-of-los-angeles-transit-system-that-took-weeks-to-recover) - TechCrunch
- [700GB data stolen! Israeli Researchers blame Iranian hackers for Los Angeles transit system breach](https://www.wionews.com/world/700gb-data-stolen-israeli-researchers-blame-iranian-hackers-for-los-angeles-transit-system-breach-1779796247002/amp) - WION