A cyberattack by an Iranian hacker group disrupted multiple public services in Albania’s capital, Tirana. The group, known as Homeland Justice, claimed responsibility for the breach, taking down the city’s official website, exfiltrating data, and wiping servers. The attack affected transportation services, the issuance of passports and licenses, and digital enrollment for kindergartens and nurseries. Municipal staff struggled to access internal systems and official emails. The attack was motivated by Albania’s hosting of the exiled Iranian opposition group Mujahideen-e-Khalq (MEK).
Source: https://therecord.media/tirana-albania-government-cyberattack-iran-linked-group
TPRM report: https://scoringcyber.rankiteo.com/company/visit-tirana
"id": "vis903062325",
"linkid": "visit-tirana",
"type": "Cyber Attack",
"date": "6/2025",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"
{'affected_entities': [{'industry': 'Public Services',
'location': 'Tirana, Albania',
'name': 'City of Tirana',
'type': 'Government'}],
'attack_vector': ['Website takedown', 'Data exfiltration', 'Server wiping'],
'data_breach': {'data_exfiltration': 'Yes'},
'date_detected': '2023-10-06',
'description': 'A cyberattack by an Iranian hacker group disrupted multiple '
'public services in Albania’s capital, Tirana, taking down the '
'city’s official website and affecting local government '
'operations.',
'impact': {'operational_impact': 'Significant',
'systems_affected': ['Municipal website',
'Internal systems',
'Official emails',
'Transportation services',
'Passport and license issuance',
'Digital enrollment for kindergartens and '
'nurseries']},
'investigation_status': 'Ongoing',
'motivation': 'Political, linked to Albania’s hosting of the exiled Iranian '
'opposition group Mujahideen-e-Khalq (MEK)',
'references': [{'date_accessed': '2023-10-06',
'source': 'Local media reports'}],
'response': {'recovery_measures': ['Efforts to restore affected systems']},
'threat_actor': 'Homeland Justice',
'title': "Cyberattack on Tirana's Public Services by Iranian Hacker Group",
'type': 'Cyberattack'}