Iran says cyberattack disrupted four major banks

Attack on banking infrastructure

Iran's Bank Coordination Council announced on Sunday that a "limited cyberattack" disrupted operations at four major state lenders — including the National Bank of Iran, Bank Tejarat, Bank Saderat Iran, and Bank Tosee Saderat — targeting their shared communications infrastructure without breaching customer data systems. The council said technical teams immediately implemented protective measures after detecting unusual activity within the network. "Technical teams immediately implemented the necessary preventive and protective measures to protect customer data and the country's banking infrastructure after identifying unusual signs," the council said in a statement carried by the state-run IRNA news agency.

Data integrity maintained

Officials emphasized that the incident remained confined to shared communication channels and did not compromise sensitive information. "Detailed technical investigations indicate that this disruption was caused by a limited cyberattack on the shared communication infrastructure of these four banks, and fortunately, no unauthorized access to customer information occurred and no information was deleted," the council stated. The announcement underscored that preventive protocols had effectively shielded the country's broader banking infrastructure from more severe penetration.

Recovery operations

All infrastructure systems are now under the control of technical experts, the council noted, adding that recovery and security operations are ongoing to restore full operational capacity across the affected institutions. The disruption marks the latest in a series of cyber incidents targeting regional financial networks, though Iranian authorities indicated that customer assets and personal records remained fully secure throughout the breach.