Security researchers have identified the March breach of the Los Angeles County Metropolitan Transportation Authority (LACMTA) as the work of Iranian-backed hackers, specifically a group named Ababil of Minab. This group claimed responsibility for the attack, stating they stole and deleted sensitive data from LACMTA's systems. Gambit Security, an Israeli startup, reported that the hackers are affiliated with Iran’s Ministry of Intelligence and State Security (MOIS). The group's name references a tragic U.S. airstrike in Iran that killed many civilians. Gambit's analysis suggests that Ababil of Minab is not an independent hacktivist group as they claim but part of a broader pattern of Iranian cyber operations. The report also highlights a surge in Iranian hacker activity targeting U.S. critical infrastructure following military actions by the U.S. and Israel against Iran earlier this year. This incident follows previous attacks attributed to Iranian-linked groups, including the Handala group, which targeted U.S. medical technology firm Stryker.