Full Breakdown
Iran's Card-Based Banking Services Disrupted by Cyberattack
6/23/2026, 11:37:58 PM
Card Services Disrupted at Three Major Iranian Banks
On June 23, Iran's state-owned banking technology provider said a cyberattack on a shared communication infrastructure disrupted card-based services at Bank Melli, Bank Saderat and Bank Tejarat, prompting a temporary suspension of all card operations, including ATMs, point-of-sale terminals and mobile apps.
Background: Prior Cyber Incidents and Attribution Claims
Iranian authorities have previously linked similar attacks to hostile foreign actors, notably naming Israel, though no official attribution has been made for the current incident.
Timeline of the Attack
Institutions and Actors
The affected banks are Bank Melli, Bank Saderat, Bank Tejarat and the Export Development Bank of Iran. The incident involves Iran’s state-owned banking technology provider and the banking coordination council, which confirmed the shared infrastructure was compromised. Iranian officials have cited Israel as a possible adversary.
Scope of Disruption
All card-related channels—ATMs, point-of-sale terminals and mobile banking apps—were rendered inoperative.
Data & Statistics
Why the Outage Matters
The suspension limited customers’ ability to conduct electronic transactions and highlighted reliance on centralized digital channels in Iran’s financial system.
Official Statements & Responses
The provider’s public-relations head confirmed the outage and said cybersecurity teams are working to restore operations. State media noted the earlier incident took several days to resolve and affirmed no customer data breach. No official comment identified the attackers, and the suspension will stay until security gaps are closed.
Counterpoint: Israeli Non-Comment
Israel has not responded to Iranian allegations that it was behind the cyberattack, offering no official comment.
Conflicting Reports & Gaps
Authorities have not provided attribution for the June 23 attack, and no evidence linking Israel has been disclosed. Iranian officials have not released forensic findings, and details on technical damage and a timeline for full restoration remain unspecified.
Ongoing Restoration and Outlook
Cybersecurity teams continue restoring card services across the affected banks. No definitive timeline for full reinstatement has been announced, but authorities say work will proceed until normal operations resume.
