Bank Sepah

Bank Sepah
بانک سپه
Company typeGovernment-owned corporation
IndustryBanking, Financial services
Founded1925; 100 years ago (1925)
FounderIranian Army Pension Fund
HeadquartersNegin Sepah Building,
Nowrouz Street, Africa Highway,
Argentina Square,
Tehran, Iran,
Tehran
,
Iran
Area served
Worldwide
Key people
Ayatollah Ebrahimi
(CEO)
ServicesCredit cards, consumer banking, corporate banking, mortgage loans
RevenueIncrease 37,153,487 IRR (2014)*[1]
Increase 20,701,827 IRR (2014)*[1]
Increase 490,892 IRR (2014)*[1]
Total assetsIncrease 500,319,226 IRR (2014)*[1]
Total equityIncrease 72,427,585 IRR (2014)*[1]
Number of employees
18,277
SubsidiariesBank Sepah International plc
Websitewww.banksepah.ir
Footnotes / references
* Amounts in IRR million

Bank Sepah (Persian: بانک سپه, Bānke Sepah, lit.'Army Bank') is a major bank in Iran with historical links with the country's military community, headquartered in Tehran. It was established in 1925 as the first modern domestic Iranian bank, as opposed to the foreign-owned Imperial Bank of Persia. Owned by the Iranian government,[2] it has been referred to as a financial platform for the country's Ministry of Defence and Armed Forces Logistics.[3]

History

[edit]
Bank Sepah branch in Rasht, in the 1920s
Former central branch of Bank Sepah in Tehran, lately Bank Sepah Museum

Bank Sepah was founded on 4 May 1925, initially known as Bank Pahlavi Qoshun (lit.'Pahlavi Army Bank')[4] in Tehran, with a capital of 388,395 tomans (3.88 million rials). It was intended to handle the financial affairs of the military personnel and set up their retirement fund.[5] With further increase in their domain of services, the headquarters for the bank was moved to a larger building in Homayoon Street. Starting on 15 March 1926, with opening of another branch in Rasht, Bank Sepah began providing services not only to the military personnel but to the more general public such as businessmen.[6] Also in 1926, it changed its name to Bank Sepah.[7]

Bank Sepah opened a branch in London in 1972, which in 2002 was reorganized as a fully-owned subsidiary named Bank Sepah International Plc (BSIP).[8] It also has branches in Frankfurt, Paris and Rome.[9]

In the early 2020s, Sepah Bank absorbed four other Iranian banks and one credit institution: Ansar Bank, Mehr Eqtesad Bank, Hekmat Iranian Bank, Ghavamin Bank and the Kosar Credit Institution.[10] The Omid Bank app is product of Bank Sepah.[11][12]

Bank Sepah maintains a museum in its former central branch in downtown Tehran, built 1950-1953 on a design by Vartan Hovanessian,[13]: 404  immediately west of Imam Khomeini Square in Tehran. The museum maintains a collection of money artefacts since ancient times.[14]

US and UN sanctions

[edit]

Sanctions were imposed on Bank Sepah by the United States on 9 January 2007, due to Iran's suspected nuclear weapons program.[15] The United States claimed that the bank assisted Iran in developing missiles that could carry nuclear weapons.[16] and all its branches and subsidiaries in Italy, UK, France and Germany[17] will have their assets frozen by the United States in order to prevent Iran from constructing nuclear weapons.[16] The official website[18] of Bank Sepah in Iran reacted by mentioning the American resolution "fabricated statements based on purely hypothetical pretext, made out of political inducements" and promised that the bank will "continue with its efficient performance with due observance of internal and international regulations as before."

On the same basis, further sanctions have also been imposed by the United Nations through Resolution 1747 of 29 March 2007 coinciding with the arrest by the Iranian Government of some British army personnel in the Persian Gulf. In early 2016, following the talks of P5+1 with Iran on the Nuclear program of Iran, and the resultant Joint Comprehensive Plan of Action, sanctions against Bank Sepah were lifted.[citation needed]

Cyberattacks

[edit]

Breach disclosed in March 2025

[edit]

In early March 2025, the hacker group Codebreakers posted a message on Telegram and other social platforms claiming they had infiltrated Bank Sepah's systems and extracted vast amounts of data.[19][20] They alleged access to more than 12 terabytes of confidential data belonging to more than 42 million individuals, including account numbers, passwords, mobile phone numbers, residential addresses, bank transaction histories, and information related to military personnel.[19][21] The group stated that they had offered the bank a 72-hour window for negotiations to prevent the disclosure of the information, with the demand of $42 million in Bitcoin, which the bank refused to pay.[22]

Initially Sepah Bank denied all claims that its security systems had been breached, as head of the Bank’s Public Relations Department Reza Hamedanchi stated that the bank's systems worked on closed networks with no connection to the internet, and that "Sepah Bank’s systems are unhackable and impenetrable”.[23] However, the bank warned media and citizens against republishing the information obtained by the hackers and threatened with legal action against those who did.[24] The threats were issued due to the bank's "position with the armed forces" and the importance of "confidentiality of information related to the country's military and security institutions".[24]

In response to the bank's denial and its "indifference to the security breach", the Codebreakers group released images of the banking data belonging to head of public relations at Bank Sepah, Reza Hamedanchi, as well as the private banking data of 20 thousand individuals, including high-profile civilian and military customers.[25] Among those whose private information and account details were exposed are Abbas Golmohammadi, former deputy director of exploration at the Geological and Mineral Exploration Organization of the country and deputy director of planning and development of the Sangan Iron Ore Complex, with an account of 768 billion Tomans, General Hassan Palarak, former senior commander of the Revolutionary Guards Quds force,[26] a supporter of pro-Islamic Republic militias in the region and a close associate of Qassem Soleimani, with a value of 634 billion tomans ($6.12M at the open market rate),[27] Alireza Arash, a member of the board of directors of Henkel Pakwash, a subsidiary of the German multinational chemical company Henkel, with an account of 408 billion Tomans.[28] Other notable individuals whose details were exposed are Mohammad Baradaran, a board member of Ghadir Investment Company, Kazem Ghalamchi, founder of Ghalamchi Educational Institute and Rasoul Sirati, CEO of Tik, a military affiliate company reportedly involved in missile and drone technology.[29][28]

The leaked information and the bank's response to the attack triggered a wave of criticism online, with Iranian citizens raising questions on how such large sums of money can be held by only a few individuals, while the general public struggles with financial difficulties.[27] Ali Sharifizarchi, an academic with a large following on Twitter/X, focussed particularly on Palarak, questioning how his wealth is justified in light of the widespread economic crisis.[27] Investigative journalist Yashar Soltani stated that the exposed data explains why Iranian citizens support the sanctions against Iran and demand financial transparency.[27] Conservative journalist Ali Gholhaki, as well as other users of social media, have mocked the bank for threatening legal action while simultaneously denying there had been any data breach.[27]

June 2025 cyberattack

[edit]

On 17 June 2025, widespread disruptions were reported in Bank Sepah services.[30][31] The disruptions affected online banking, ATMs, and other digital services, leaving many customers unable to carry out daily banking operations.[32]

According to Iranian media, the disruptions also impacted fuel stations, which rely on Bank Sepah’s banking infrastructure. This situation raised concerns about a broader crisis in public service delivery.[32]

Later that day, a video was circulated showing the interior of the bank’s data center, where unidentified individuals were seen interacting physically with the servers, with no official explanation provided regarding their identity or mission. The footage sparked a wave of speculation across Iranian social media, with some users suggesting that the disruption may have resulted from physical intrusion into the data center, rather than a purely technical malfunction.[33][34]

See also

[edit]

icon Banks portal

References

[edit]
  1. ^ a b c d e Bank Sepah Financial Statements Archived 2015-04-02 at the Wayback Machine, Bank Sepah, 24 March 2014
  2. ^ "Bank Sepah". UK Find and update company information service. Retrieved 28 June 2025.
  3. ^ "Treasury Sanctions Eighteen Major Iranian Banks". U.S. Department of the Treasury. 8 October 2020.
  4. ^ "A Review of History of Banking System in Iran". Pars Time. Spring 2001.
  5. ^ "History of Banking in Iran". Iran Chamber Society. Retrieved 28 June 2025.
  6. ^ "سالروز تاسیس نخستین بانک ایرانی". donya-e-eqtesad.com. Archived from the original on 2020-07-16. Retrieved 2020-07-16.
  7. ^ "The founding and growth of banking in Iran". Iran1400. 17 October 2023.
  8. ^ "In the heart of the city since 1972". Bank Sepah International plc. Retrieved 28 June 2025.
  9. ^ Financial Services Forecast, Economist Intelligence Unit, 18 August 2008
  10. ^ Iran Completes Merger of Six Banks with Links to Military, iranwatch.org. Accessed 20 June 2025.
  11. ^ "Omid Bank". omidboom.ir.
  12. ^ حیدری, هانا (2024-03-16). "سامانه بانکداری قرض‌‌‌الحسنه دیجیتال بانک سپه رونمایی شد". راه پرداخت (in Persian). Retrieved 2024-11-24.
  13. ^ Farivash Ghanadi Maragheh & Hilal Tugba Ormecioglu (December 2021), "The Spaces of Finance in Iran and Turkey at the beginning of the 20th Century: The Cases of Melli Bank, the Sepah Bank, Turkish Central Bank, and the Ziraat Bank", The Journal of Iranian Studies
  14. ^ "Sepah Bank Museum". IranRoute. Retrieved 28 June 2025.
  15. ^ "BBC NEWS - World - Middle East - US blacklists Iranian state bank". news.bbc.co.uk. 9 January 2007. Archived from the original on 2020-02-27. Retrieved 2007-01-10.
  16. ^ a b http://www.mercurynews.com/mld/mercurynews/news/politics/16420611.htm [dead link]
  17. ^ "Bank Sepah - Branchs". Archived from the original on 2006-10-21. Retrieved 2007-01-10.
  18. ^ "بانک سپه". Archived from the original on 2007-06-06. Retrieved 2007-05-04.
  19. ^ a b "تهدید هکرها و انکار بانک؛ افشای فهرست میلیاردرهای سرشناس در بانک سپه". ایندیپندنت فارسی (in Persian). 2025-03-30. Retrieved 2025-04-02.
  20. ^ "Hackers Claim Access to 42 Million Sepah Bank Records, Bank Denies Breach". iranwire.com. Retrieved 2025-04-02.
  21. ^ "Hackers Claim Access to 42 Million Sepah Bank Records, Bank Denies Breach". iranwire.com. Retrieved 2025-04-02.
  22. ^ "تهدید هکرها و انکار بانک؛ افشای فهرست میلیاردرهای سرشناس در بانک سپه". ایندیپندنت فارسی (in Persian). 2025-03-30. Retrieved 2025-04-02.
  23. ^ "Hackers Claim Access to 42 Million Sepah Bank Records, Bank Denies Breach".
  24. ^ a b فردا, رادیو (2025-03-31). "دربارهٔ «هک» اطلاعات مشتریان بانک سپه چه می‌دانیم؟". رادیو فردا (in Persian). Retrieved 2025-04-02.
  25. ^ "Hackers Claim Access to 42 Million Sepah Bank Records, Bank Denies Breach". iranwire.com. Retrieved 2025-04-02.
  26. ^ فردا, رادیو (2025-03-31). "دربارهٔ «هک» اطلاعات مشتریان بانک سپه چه می‌دانیم؟". رادیو فردا (in Persian). Retrieved 2025-04-02.
  27. ^ a b c d e "Claimed hacking of Iran's oldest bank raises questions about motives". Amwaj.media. Retrieved 2025-04-03.
  28. ^ a b "تهدید هکرها و انکار بانک؛ افشای فهرست میلیاردرهای سرشناس در بانک سپه". ایندیپندنت فارسی (in Persian). 2025-03-30. Retrieved 2025-04-02.
  29. ^ Newsroom, Iran International (2023-06-29). "Latest Company Involved In Iran's Drone Program Revealed". www.iranintl.com. Retrieved 2025-04-03. {{cite web}}: |last= has generic name (help)
  30. ^ 27 Khordad: Bank Sepah closed and went offline.
  31. ^ "Bank Sepah disruptions to be resolved soon". Rokna (in Persian). 2025-06-17. Retrieved 2025-06-17.
  32. ^ a b https://x.com/SepahBigLooting/status/1934898608626934104
  33. ^ "Hacker group: We destroyed all Bank Sepah data". IranWire (in Persian). Retrieved 2025-06-17.
  34. ^ ""Bank Sepah hacked and all data destroyed"". Gooya News. Retrieved 2025-06-17.
[edit]

Media related to Bank Sepah at Wikimedia Commons