The person at the center of this case
Multiple institutions: 144 U.S. universities, 176 foreign universities, 5 U.S. government agencies, 36 U.S. private companies, 11 foreign companies, 2 international NGOs
Cold Case · Open
8 years waiting · since 2018
ROOZBEH SABAHI
Justice for Multiple institutions: 144 U.S. universities, 176 foreign universities, 5 U.S. government agencies, 36 U.S. private companies, 11 foreign companies, 2 international NGOs — the trail went cold in 2018, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1Roozbeh Sabahi is believed to reside in Iran and speaks Farsi; what is his current location and is he still active in cybercriminal operations?
🔍
evidence
Lead #2How extensive was the stolen proprietary data and research, and what Iranian government agencies or entities benefited most from the intelligence gathered?
👤
person
Lead #3Who were Sabahi's co-conspirators and other contractors working with the Mabna Institute on this scheme?
Roozbeh Sabahi is wanted for his role in a sophisticated international cybercrime conspiracy that targeted over 140 U.S. universities, foreign institutions, and government agencies to steal proprietary data and research. Operating as a contractor for Iran's Mabna Institute at the direction of the Islamic Revolutionary Guard Corps, Sabahi and his co-conspirators obtained unauthorized access to computer systems and sold stolen data to Iranian customers. The case remains active as Sabahi is believed to be residing in Iran, and investigators continue seeking information about his whereabouts and potential accomplices in this multi-year scheme.
Case
#988
United States (victims); Iran (suspect residence)
United States District Court for the Southern District of New York; FBI
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4What methods did Sabahi use to gain initial unauthorized access to these diverse institutional networks across multiple countries?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit Computer Hacking; Conspiracy to Commit Wire Fraud; Computer Fraud - Unauthorized Access for Private Financial Gain; Wire Fraud; Aggravated Identity Theft Caution: Roozbeh Sabahi is wanted for his alleged involvement in criminal activities, including obtaining unauthorized access to computer systems, stealing proprietary data from those systems, and selling that stolen data to Iranian customers such as Iranian universities and the Iranian government. Sabahi was a contractor for the Mabna Institute , a private government contractor based in the Islamic Republic of Iran that performed this work for the Iranian government, at the behest of the Islamic Revolutionary Guard Corps.
Victims of the scheme included approximately 144 universities in the United States, 176 foreign universities in 21 countries, five federal and state government agencies in the United States, 36 private companies in the United States, 11 foreign private companies, and two international non-governmental organizations. On February 7, 2018, a grand jury sitting in the United States District Court for the Southern District of New York indicted Sabahi on computer intrusion, wire fraud, and aggravated identity theft charges, and a federal arrest warrant has been issued for his arrest.
Remarks: Sabahi is known to speak Farsi and resides in Iran.
Timeline of Events
🕵️
2018-02-07
Federal Indictment Issued
Grand jury in the U.S. District Court for the Southern District of New York indicted Sabahi on computer intrusion, wire fraud, and aggravated identity theft charges; federal arrest warrant issued
Case Information
Incident:February 7, 2018
Last Updated:September 10, 2026
Leave a comment
Comments
Case Information
Incident:February 7, 2018
Last Updated:September 10, 2026