31°46′40.7″N 35°14′07.7″E
Top Stories
The Wire
← The Wire
The Front · Dispatch · SecurityConfirmed

Iran says four major banks hit by cyberattack, no customer data compromised

The Zioneer Intelligence Desk
Iran says four major banks hit by cyberattack, no customer data compromised

Primary source Internal intake · 10 reviewed intake signals · Desk window 11:07

TL;DR

A cyberattack disrupted services at Bank Melli, Bank Tejarat, Bank Saderat, and the Export Development Bank of Iran, affecting a shared communications infrastructure. Iranian banking authorities said no customer data was accessed or deleted. The attack was reported at around 11:05 Jerusalem time, following earlier reports of disruptions Friday morning.

01 · THE DISPATCH

Iranian banking authorities now say no customer data was compromised in the cyberattack that disrupted services at four major banks earlier today. The update was reported by state media at around 11:05 Jerusalem time, following hours of widespread outages at Bank Melli, Bank Tejarat, Bank Saderat, and the Export Development Bank of Iran that affected ATMs, payment terminals, and mobile apps. Technical teams continue working to restore full service, according to the reports.

The story first emerged Friday morning. At 10:47 Jerusalem, The Zioneer reported that state media had flagged the attack as an ongoing disruption. By 12:36 Jerusalem, a series of updates had confirmed the four banks by name, added that the attack targeted a shared communications infrastructure, and — moving from a single IRGC-linked source (Fars news agency) to multiple newsrooms — established that Iranian officials were already denying unauthorized data access or deletion. The current confirmation from authorities that no customer data was compromised is the strongest official denial so far.

The attack comes amid heightened regional tensions, including cyber operations by Iranian groups such as Khanzala and repeated infrastructure disruptions, as The Zioneer has reported. Bank Melli was designated by Israel as a terrorist organization approximately six months ago, a designation cited in earlier thread coverage.

What remains open: the identity of the attackers, the full extent of the operational impact, and whether any data was indeed exfiltrated — Iranian officials continue to deny data theft, but no independent verification has been reported. Earlier unverified reports from June 11 of funds vanishing from Iranian accounts, including at Bank Sepah and Bank Melli, are not linked to this attack by Iranian authorities.

02 · How it developed

11 developments

  1. Latest

    Credit card services disabled at Bank Melli, Tejarat, Saderat, and Tose’eh Saderat.

  2. Authorities confirm no customer data was compromised in the four-bank attack.

  3. Banking council denies unauthorized data access or deletion following the disruption

Related dispatches
03 · Source and signal

Source and signal

  • Internal intake
Desk accountability

This dispatch is published under The Zioneer Intelligence Desk. Raw intake channels remain internal provenance; an external outlet or channel is named only when it materially helps readers evaluate a specific claim.