Iran says cyber police arrest five over ransomware attacks on state agencies

Iranian authorities say cyber police have arrested five people in connection with a ransomware campaign that allegedly targeted several state agencies. According to the official account, the suspects encrypted files on government systems and demanded payment in cryptocurrency.

The arrests were announced as part of a broader effort by the government to portray itself as cracking down on cybercrime against public infrastructure. Authorities did not immediately provide independent evidence of the scale of the alleged intrusion or identify the agencies affected.

Ransomware attacks have become a growing threat to public institutions worldwide, often disrupting services and exposing weak security practices. In Iran, where state systems have faced repeated cyber incidents, such cases also raise questions about the resilience of government digital infrastructure and the transparency of official reporting.

The claim comes from Iranian authorities and has not been independently verified. Reuters reported the arrests on June 27, 2026.