The short version: a digital Caltrans freeway sign on the 405 in Los Angeles was hijacked and used to advertise goorkan.info — a site that publishes names, photos and threats aimed at opponents of Iran’s regime living in Los Angeles. Drivers saw the address. Local activists recognized themselves on the site. People panicked. Caltrans ordered the sign restored and says it is reviewing access logs. That is the news. The rest is what this should make us demand from our leaders and agencies right now.
The sign hack: what actually happened
A message board near Westwood — in the heart of LA’s large Persian community — briefly displayed a web address that routes to a doxxing site with a “Burn List” and menacing language. Local residents first noticed the message and photographed it. At least one person who found themselves listed on the website filed a complaint with the FBI’s Los Angeles field office. Caltrans says its contractor was told to restore normal operations and that a review of the sign’s access history is underway. That is all the official confirmation we have publicly so far.
Who is likely behind it — and why we should not shrug
Some outlets and activists point to links between the site and Iran‑linked actors, even the Islamic Revolutionary Guard Corps. No federal agency has publicly attributed the sign hack to Iran in this case. Still, the claim fits a worrying pattern: recent advisories and breaches tie Iranian state‑linked cyber tools to spying on dissidents abroad, and California has already been hit by other incidents, including a transit breach and reported attacks on utilities. Whether this was a remote hack, a local prank, or a politically motivated intimidation operation, the effect is the same — people who fled repression feel unsafe on American soil.
Why this is about more than a roadside prank
This is not a quaint tech problem. It is about doxxing and intimidation inside the United States. A foreign‑linked website publishing personal details of Americans or residents, then using our public infrastructure to point people to it, is an escalation. It is a real threat to free speech, to safety, and to the principle that the U.S. will be a refuge from state terror. And before anyone suggests calm, remember: when infrastructure is easy to exploit, bad actors act. Our agencies should not be playing catch‑up while communities are put at risk.
What must happen next
Start with the simple things: Caltrans should publicly release the sign ID, the time stamps, and who the contractor is. The FBI should say whether it is investigating and advise anyone listed on the site how to protect themselves. DHS/CISA needs to offer help and push a technical fix for highway sign systems nationwide. Whoever runs goorkan.info should be tracked, its hosting and domain records seized if possible, and those responsible should face prosecution or sanctions. Quiet reviews and “ongoing investigations” are not enough when foreign intimidation shows up on our freeways. If America cannot keep its roads and people safe from transnational bullies, we should be honest about where our priorities are — and fix them fast.

