Overview

• On June 17, the Predatory Sparrow group posted messages claiming it wiped data from Bank Sepah, which is owned by Iran’s Revolutionary Guards Corps.
• Disruptions have spread nationwide, with customers unable to access accounts online, in-branch services, or withdraw cash from ATMs.
• The group’s history of destructive cyberattacks includes a 2021 gas station outage and a fire at a steel facility in 2022.
• The IRGC Cyber Security Command has banned officials from using public-networked devices to contain further breaches.
• Bank Sepah’s international branches and its US and UK sanctions amplify concerns over potential economic and operational fallout.