Israeli cybersecurity researchers say Iranian-linked hackers carried out a disruptive cyber breach of parts of the Los Angeles County Metropolitan Transportation Authority (LACMTA) in March. The incident reportedly forced the agency to shut down sections of its network, affecting operations of the Los Angeles transit system. According to Gambit Security, a Tel Aviv-based firm, the hackers stole at least 700 gigabytes of data, including emails, backups, and other files. The firm says the data was associated with a server tied to an earlier known Iranian threat profile. Gambit Security also reports that it discovered the breach after the stolen material was inadvertently exposed online, enabling investigators to trace the files back to the suspected perpetrators.
The reports describe access reaching beyond general data theft, including compromise of systems used for transit operations. Both outlets attribute the findings to Gambit Security’s investigation and present the conclusions as based on the firm’s analysis of the stolen data and related infrastructure. The outlets do not cite additional confirmation from U.S. authorities in their provided text.
