Codebreakers attack on Bank Sepah

The Codebreakers attack on Iranian Bank Sepah was a major cyber intrusion publicly disclosed in March 2025. A hacker collective known as "Codebreakers" claimed responsibility for breaching Sepah Bank, one of Iran's oldest and most strategically significant financial institutions. The group alleged it had accessed over 42 million customer records, including sensitive financial data. The incident followed the IRLeaks attack in 2024, and the cyber attack on the Melli Bank in 2021, and as a result the vulnerabilities of Iran's financial infrastructure were exposed, causing widespread criticism against the bank and its affluent customers from the military and government sectors.

The bank initially responded with a complete denial of the breach, while simultaneously issuing warnings to local media against publishing the leaked data and threatening with legal prosecution. The hacker group responded with partial exposure of the leaked information, including the financial data of senior Iranian officials and IRGC officers with billions of Iranian Tomans in their accounts. Contrasted with the rampant poverty in Iran, the incident triggered widespread criticism in social media against the officials and the regime, and the manner in which the bank addressed the incident was mocked.