Montenegrin law enforcement, in coordination with the U.S. Federal Bureau of Investigation, has arrested an Iranian national accused of conducting large-scale hacking operations that inflicted significant damage on U.S. infrastructure.
The 39-year-old man, who holds both Iranian and Turkish citizenship, is the subject of an indictment filed by the Southern District Court in New York. Charges listed in that filing include conspiracy to commit computer fraud, hacking, and identity theft.
Montenegro's police directorate said the arrest took place in the Adriatic resort town of Kotor, and noted the suspect will be presented to a High Court judge in Podgorica as part of extradition procedures. The directorate added that, from 2013 onward, the individual "carried out massive hacking attacks" that targeted more than 150 universities in the United States, resulting in damage estimated at over $3.4 billion.
According to the Montenegrin statement, data obtained during the intrusions and access to compromised university accounts were exploited for the benefit of the Islamic Revolutionary Guard Corps and other Iranian entities, including universities. The FBI was not immediately available for comment.
The police announcement also referenced broader U.S. government concern: in April, U.S. cybersecurity, law enforcement, and intelligence agencies warned of a ramp-up in Iranian hacking campaigns aimed at equipment across critical U.S. infrastructure.
The matter now proceeds through Montenegro's judicial process, where extradition will be considered by a High Court judge in the capital, Podgorica. Beyond that procedural step, the public record in the Montenegrin statement and the U.S. indictment form the basis for the charges and the request for transfer to U.S. authorities.
This development follows statements by Montenegrin police that link the alleged intrusions to state-affiliated Iranian actors and outlines the financial and institutional impacts attributed to the attacks. Further comment from U.S. federal authorities was not immediately forthcoming at the time of the police announcement.