Fact Check: Tirana's Municipal Services Paralyzed by Iranian Cyberattack
What We Know
On September 7, 2022, Albanian Prime Minister Edi Rama announced that a series of damaging cyberattacks targeting the country's critical digital infrastructure had been attributed to Iranian state actors. This led to Albania severing diplomatic relations with Iran, marking a significant response to the cyberattacks that had occurred earlier that summer (source). The hacking group known as HomeLand Justice, believed to be linked to the Iranian government, conducted multiple attacks, including one that compromised sensitive data from the Albanian police and intelligence services (source).
In July 2022, the Albanian government reported that its websites and services were taken down by Iranian cyber actors, which was interpreted as retaliation for Albania's hosting of the Iranian opposition group Mujahedeen-e-Khalq (MEK) (source). Following these incidents, Albania sought assistance from American cybersecurity firms, including Mandiant and Microsoft, which confirmed the Iranian involvement in the attacks (source).
More recently, in February 2023, Albania's Institute of Statistics reported a sophisticated cyberattack attributed to the same Iranian-backed group, further highlighting ongoing cyber threats (source).
Analysis
The claim that Tirana's municipal services were paralyzed by an Iranian cyberattack is partially true. While it is confirmed that cyberattacks attributed to Iranian actors did disrupt various Albanian governmental services, including the municipal services, the extent of the paralysis and the specific details surrounding the municipal services' operations remain less clear.
The reliability of the sources reporting these events varies. The initial reports from the Albanian government and cybersecurity firms like Mandiant and Microsoft are credible, as they are backed by investigations and expertise in cybersecurity (source). However, some reports from local media and less authoritative sources may lack independent verification, which raises questions about the full scope of the impact on municipal services (source, source).
The Iranian Foreign Ministry has denied involvement in the cyberattacks, asserting that such claims are unfounded and serve as a pretext for Albania's actions against Iran (source). This denial, however, comes in the context of a broader pattern of Iranian cyber operations against perceived adversaries, which lends some credibility to the allegations against Iran (source, source).
Conclusion
The verdict is Partially True. While there is substantial evidence that Iranian cyberattacks have targeted Albanian governmental services, including municipal operations, the claim that these services were completely paralyzed may overstate the situation. The attacks did cause significant disruptions, but the full extent of the paralysis and its specific impacts on municipal services require further clarification and verification.
Sources
- Iran's Balkan front: The roots and consequences of Iranian cyberattacks ...
- A cyberattack targets Albanian Parliament's data system, halting its ...
- Albanian authorities accuse Iranian-backed hackers of cyberattack on ...
- In Cyberattacks, Iran Shows Signs of Improved Hacking ...
- A NATO Minnow Reels From Cyberattacks Linked to Iran
- Iranian hackers target Albania in retaliation for hosting dissidents
- Iran Hacks Tirana Municipality in Retaliation Over MEK