Montenegro hands an alleged Mabna operative to New York, and a damage figure travels with him
Amir Barati’s transfer to the Southern District of New York is confirmed and wire-sourced. The $3.4 billion attached to it in this week’s coverage is not yet established as a 2026 number.
Montenegro extradited Amir Barati, a dual Turkish-Iranian national, to the United States, according to an Associated Press report filed via ABC News at 12:36 PM on 1 October. Montenegrin police said the extradition covered alleged cyberattacks against more than 150 US universities causing an estimated $3.4 billion in damage. Barati was arrested by Montenegrin police on 25 June on an FBI warrant; the national police identified him publicly only by the initials “A.B.” and his age, 40. SecurityWeek named him. He is one of 17 defendants in a 14-count superseding indictment unsealed in August 2026 charging members of the Iran-based Mabna Institute, and faces wire and computer fraud counts in the Southern District of New York. The indictment alleges intrusions conducted on behalf of both the Islamic Revolutionary Guard Corps and private Iranian organisations.
The counts in the superseding indictment, as reported by SecurityWeek, are 144 universities targeted in the United States and 178 abroad, 42 US private companies and 11 foreign ones, five US government agencies and at least two NGOs, with intrusion activity dated from 2013. The AP’s “more than 150 US universities” and SecurityWeek’s 144 do not reconcile, and should not be averaged. The extradition itself is five days old as of publication. What put it back into circulation on 5 October was a Tom’s Hardware write-up built on a CNN report — aggregation of aggregation — carrying the headline figures of 31 terabytes exfiltrated from more than 300 universities. Al Bawaba ran the story on 3 October. Iran International had previewed the extradition on 22 September.
Assessment: The event is solid; the arithmetic around it is not. The quantities now riding on this extradition — $3.4 billion, 31 terabytes, 300-plus universities — closely resemble the totals in the 2018 Justice Department Mabna indictment, and we have not established whether the August 2026 superseding filing quantifies new harm or restates the old sums. Until someone reads both documents side by side, treat the damage estimate as unprovenanced. That is the real story here: a dollar figure with no retrievable origin acquiring freshness by attaching itself to a genuine arrest. Note also that neither the AP filing nor SecurityWeek surfaced an on-the-record quote. The SDNY release and the Uprava policije statement remain unread.