Iranian Hackers Compromise LA Metro Systems, Exposing Sensitive Data

Published on May 26, 2026

The Los Angeles County Metropolitan Transportation Authority operated within a relatively stable environment until March 2023. The agency managed rail operations, ensuring safety and efficiency for commuters. However, this normalcy was disrupted cyber incident.

Gambit Security, a cybersecurity firm based in Tel Aviv, recently reported that Iranian hackers infiltrated the Metro’s systems. They accessed critical systems, stealing approximately 700 gigabytes of emails, backups, and other sensitive files. This breach was traced back to a server linked to previously identified Iranian cyber actors.

The attack took significant portions of the Metro offline, causing operational disruptions. While immediate safety concerns were addressed, the incident revealed vulnerabilities within the agency’s cybersecurity infrastructure. Officials launched a full investigation to assess the scope of the breach.

The fallout from this attack extends beyond technical repercussions. Trust in the agency’s capabilities may wane among commuters, and questions about data security persist. As agencies scramble to fortify defenses, the incident serves as a wake-up call about the growing sophistication of cyber threats.

Related News