Iranian-Turkish Hacker Extradited to US Over $3.4 Billion University Cyberattack Campaign

Amir Barati was on vacation in a postcard-perfect Montenegrin coastal town when police caught up with him. U.S. prosecutors say the man they found in Kotor had helped steal 31 terabytes of data from more than 150 universities worldwide.

Barati, 40, a dual Iranian-Turkish national, was extradited from Montenegro to the United States on October 1, 2026, to face charges in New York's Southern District, according to ABC News. The charges include conspiracy to commit computer fraud, hacking, and identity theft. He was detained in June in Kotor by Montenegrin police and Interpol, acting on an FBI arrest warrant, and a Montenegrin court issued the final decision to extradite him this week.

Prosecutors allege Barati was a key figure in a hacking campaign running since 2013, carried out in coordination with an Iran-based entity. The Justice Department accuses the group of breaching 144 American universities and 42 U.S. companies, plus 178 foreign universities and at least 11 foreign companies, stealing at least 31 terabytes of data and intellectual property. Authorities estimate the total damage at $3.4 billion. Barati was named in an August superseding indictment that charged 17 people total in connection with the campaign.

U.S. authorities allege the operation's proceeds benefited Iran's Islamic Revolutionary Guard Corps and other Iranian organizations. Montenegrin police described Barati as a "high-profile" target.

Barati is expected to face wire and computer fraud charges in the U.S. Southern District of New York alongside the other defendants named in the August indictment. IF Daily will follow the case as it proceeds through the courts.