The cyberattack on Iran's Bank Sepah was a major cyberattack that was publicly disclosed in Farvardin 1404 (Farvardin 1404). A hacking group claimed responsibility for the breach at Bank Sepah, one of Iran's oldest and most important financial institutions. The group claimed to have accessed more than 42 million customer records, including sensitive financial data.