The person at the center of this case
Multiple victims: 144 U.S. universities, 176 foreign universities, 5 U.S. government agencies, 36 U.S. private companies, 11 foreign private companies, 2 international NGOs
Cold Case · Open
8 years waiting · since 2018
EHSAN MOHAMMADI
Justice for Multiple victims: 144 U.S. universities, 176 foreign universities, 5 U.S. government agencies, 36 U.S. private companies, 11 foreign private companies, 2 international NGOs — the trail went cold in 2018, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1Ehsan Mohammadi's current whereabouts and activities in Iran; any travel outside Iran that could enable arrest
🔍
evidence
Lead #2Identification of all stolen proprietary data and its current use by Iranian entities
💡
clue
Lead #3Connections between Mabna Institute operatives and potential co-conspirators still at large
Ehsan Mohammadi, a leader of Iran-based Mabna Institute, is wanted for orchestrating a massive cybercrime scheme that breached over 144 U.S. universities, 176 foreign universities, and numerous government agencies and private companies to steal proprietary data. The stolen information was sold to Iranian customers including universities and the Iranian government at the direction of the Islamic Revolutionary Guard Corps. Mohammadi remains at large in Iran, and locating him requires international cooperation to hold him accountable for one of the largest coordinated cyber theft operations targeting American institutions.
Case
#824
United States District Court for the Southern District of New York; FBI
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
👤
person
Lead #4How Mohammadi's role as Mabna Institute leader connects to broader Iranian government cyber operations
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit Computer Hacking; Conspiracy to Commit Wire Fraud; Computer Fraud - Unauthorized Access for Private Financial Gain; Wire Fraud; Aggravated Identity Theft Caution: Ehsan Mohammadi is wanted for his alleged involvement in criminal activities, including obtaining unauthorized access to computer systems, stealing proprietary data from those systems, and selling that stolen data to Iranian customers such as Iranian universities and the Iranian government. Mohammadi was a leader of the Mabna Institute , a private government contractor based in the Islamic Republic of Iran that performed this work for the Iranian government, at the behest of the Islamic Revolutionary Guard Corps.
Victims of the scheme included approximately 144 universities in the United States, 176 foreign universities in 21 countries, five federal and state government agencies in the United States, 36 private companies in the United States, 11 foreign private companies, and two international non-governmental organizations. On February 7, 2018, a grand jury sitting in the United States District Court for the Southern District of New York indicted Mohammadi on computer intrusion, wire fraud, and aggravated identity theft charges, and a federal arrest warrant has been issued for his arrest.
Remarks: Mohammadi is known to speak Farsi and resides in Iran.
Timeline of Events
🕵️
2018-02-07
Federal Indictment Issued
Grand jury in U.S. District Court for the Southern District of New York indicted Ehsan Mohammadi on computer intrusion, wire fraud, and aggravated identity theft charges; federal arrest warrant issued
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:February 7, 2018
Last Updated:June 15, 2026
Leave a comment
Comments
Case Information
Incident:February 7, 2018
Last Updated:June 15, 2026