Cyberattacks on US businesses linked to Iran, despite ongoing ceasefire

An expert told the ABC7 I-Team that federal agencies and U.S. cities have been on alert for potential retaliatory attacks amid war
Friday, April 24, 2026 6:54PM CT
CHICAGO (WLS) -- There is an update on efforts by Iranian-associated groups to disrupt American businesses.

ABC News has learned of multiple cyberattacks linked to Iran on US businesses in just the past week, despite the ongoing ceasefire President Donald Trump extended as he claims Iran may have a counteroffer to a peace deal.



According to SITE Intel, a non-partisan group that monitors extremist content online, starting on Sunday, there were denial-of-service attacks against movie theater chain Cinemark and user review site Yelp. That's when a website is flooded with illegitimate requests making it unusable or inaccessible.

Then on Monday, Expedia, Vrbo, Hotels.com, Travelocity and Orbitz were all hit with denial-of-service attacks.



Tuesday, there was another cyberattack on social media site Bluesky, as well as IT services company ConnectWise. BlueSky alerted users on their website the application is largely stable despite an additional cyberattack this week, and they have found no evidence of unauthorized access to private user data.

LIVE UPDATES: Iran live updates: Witkoff, Kushner to travel to Islamabad Saturday for peace talks

While ABC News has not learned of any explicit motivations, all of the cyberattacks have been linked to Iranian backed organizations.

Former senior counselor to the Secretary of Homeland Security, now head of the Cyber Policy Initiative at University of Chicago, Jake Braun told the ABC7 I-Team just last month he expected nothing less after U.S. bombs started dropping in Iran. He knows from past experience.

"The first event I did when I was in the White House was in Pittsburgh, right after the Iranians had hacked their local water utility there. And so we could see more attacks on critical infrastructure like that that they've already been conducting across the country," Braun said.



And while this week's attacks have been on mainly consumer websites, Braun told the I-Team disruption is the playbook, and it could escalate.

"We're talking about ending the regime. And, so I would presume the regime there is going to use any tool at its disposal to stop that."

The I-Team reached out to all of the companies named in this story for comment. They either didn't respond or declined to comment.

ABC News contribute to this report.
Copyright © 2026 WLS-TV. All Rights Reserved.