{"id":12700,"date":"2026-06-17T16:25:42","date_gmt":"2026-06-17T16:25:42","guid":{"rendered":"https:\/\/sawahsolutions.com\/range\/peace-deal-unlikely-to-stem-irans-hackers-us-officials-say\/"},"modified":"2026-06-17T16:25:43","modified_gmt":"2026-06-17T16:25:43","slug":"peace-deal-unlikely-to-stem-irans-hackers-us-officials-say","status":"publish","type":"post","link":"https:\/\/sawahsolutions.com\/range\/peace-deal-unlikely-to-stem-irans-hackers-us-officials-say\/","title":{"rendered":"Peace deal unlikely to stem Iran’s hackers, US officials say"},"content":{"rendered":"
\n

The preliminary U.S.-Iran agreement reached over the weekend likely won\u2019t stop cyber operations launched by Tehran and Iran-aligned hacking groups at American systems, five current and two former U.S. officials told Nextgov\/FCW<\/em>.<\/p>\n

Most of them were granted anonymity because they were not authorized to publicly discuss forward-looking perspectives of Iranian cyber activity after the agreement.<\/p>\n

Cyber conflict is \u201cdefinitely part of warfare that keeps going\u201d and is pretty \u201caccepted\u201d as an \u201congoing normal course of business,\u201d one of the officials said, adding that cyber activity may decelerate, but that it \u201cdefinitely won\u2019t stop.\u201d<\/p>\n

There is \u201cno chance\u201d Iran and any affiliated parties would cease or slow down in cyberspace, a second official opined.<\/p>\n

Hacking activity could decrease temporarily, said one of the former officials, but if pro-Iran hacking collectives don\u2019t like any finalized resolution, they may conduct cyberattacks to express their issues, as Iran\u2019s central government doesn\u2019t always have the best control of these groups.<\/p>\n

\u201cThere has always been anti-U.S. activity\u201d from such \u201chacktivist\u201d groups that align with Iran but aren\u2019t backed by the regime directly, this former official added.<\/p>\n

Their outlook aligns with past conclusions that cyber operations continue regardless of the status of a given conflict and that U.S. cyber teams have remained on alert for Iranian-linked activity against American networks as Washington pursues a diplomatic solution with Tehran.<\/p>\n

Since the war broke out Feb. 28, experts expected the conflict would greatly test U.S. cyber defenses. What followed was a series of apparent Iran-linked cyber incidents, including an attack on medical technology giant Stryker, the targeting of FBI Director Kash Patel\u2019s personal email account and various warnings from federal agencies about cyber intrusions on U.S. critical infrastructure.<\/p>\n

On June 11, the California Water Service said it was investigating claims that Iranian hackers breached its systems. An assessment from Dataminr concluded that the group may have reached a customer billing database belonging to the utility. Nextgov\/FCW<\/em> also obtained a screenshot that appeared to show a customer billing account receipt accessed by the hackers.<\/p>\n

A spokesperson said Tuesday that there are \u201cno known operational disruptions\u201d to water, wastewater and billing systems, and that it was working with state and federal government officials in its investigation.\u00a0<\/p>\n

The preliminary U.S.-Iran memorandum reached Sunday aims to halt nearly four months of fighting and set up a formal signing in Geneva later this week. But the agreement leaves major disputes unresolved, including regional flashpoints involving Israel and Hezbollah. It also appears to leave out mentions of cyber.<\/p>\n

\u201cThe Iranians have targeted U.S. assets with malicious cyber activity for the last 15 years with espionage and some prepositioning for disruptive attacks,\u201d said Meredith Burkart, the FBI\u2019s former chief of cyber policy. \u201cUnless there has been a material change in their cyber workforce, or a cyber specific component of the deal was reached, I would expect such targeting to continue.\u201d<\/p>\n

\u201cI don\u2019t know if these deals really ever include minimizing cyber activity,\u201d another one of the current officials told Nextgov\/FCW<\/em>. Certain targets may be deemed off limits, \u201cbut we\u2019ve always seen activity\u201d continue in the digital space, added the official.<\/p>\n

The deal also remains fragile, even on its central nuclear terms. CIA Director John Ratcliffe and others raised concerns about Iran\u2019s willingness to make the nuclear concessions Washington wants in a final agreement, Axios reported Tuesday.<\/p>\n

Tehran\u2019s hackers have grown more organized, more coordinated and more willing to use artificial intelligence for influence operations in recent months \u2014 and have demonstrated many of those capabilities since the war with Iran began, Israel\u2019s top cyberdefense official told Nextgov\/FCW<\/em> last month.<\/p>\n

The U.S. intelligence community assessed this year that Iran and affiliated proxy groups remain a persistent cyber threat to American networks and critical infrastructure, and they intend to target the U.S. and its allies.\n\n<\/svg><\/p>\n<\/div>\n