The US-Israel military operations against Iran that commenced this past weekend represent a significant escalation in hostilities that carries substantial cyber risk for US public and private sector organizations. Iran has a demonstrated capability and willingness to employ cyber operations as a tool of asymmetric retaliation. Since Saturday, the NJCCIC has been monitoring the activity of various state-sponsored and hacktivist threat actor groups aligned with Iran and its proxies. Based on well-established patterns observed during the June 2025 Israel-Iran war and the Israel-Hamas conflict in October 2023, the NJCCIC assesses that US public and private sector cyber assets, including those in New Jersey, face a heightened risk of cyberattacks from Iranian state-sponsored threat actors, Iranian-aligned hacktivist groups, and other adversarial threat actors who may exploit the current crisis.

While no specific or credible threat to New Jersey’s public and private sector cyber assets has been identified at this time, constant monitoring and heightened vigilance are required. The NJCCIC will continue to monitor the situation and will produce subsequent situational reports as warranted if changes in attack vectors, targets, or impacts occur, especially those related to New Jersey or the United States.