Cyber Incident Victim: Bank of Israel
Date:
Apr 2022
Location:
Israel
Summary
A financial institution faced claims by Iranian-linked hackers who asserted unauthorized access to its interbank transfer network and customer accounts. The country’s National Cyber Directorate and the bank itself refuted these allegations, stating no evidence of compromise was found in their systems.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On April 25, 2022, a hacker group allegedly linked to Iran publicly claimed to have compromised the Bank of Israel's interbank money transfer network. The attackers asserted they had infiltrated the central banking system responsible for processing transactions between Israeli financial institutions and subsequently gained unauthorized access to individual customer accounts. This announcement surfaced through undisclosed channels frequented by cybercriminal entities, though the group provided no verifiable evidence to substantiate their intrusion claims. The targeted system facilitates critical financial operations across Israel's banking sector, handling sensitive transactional data and personal account information.
Israel's National Cyber Directorate and the Bank of Israel immediately issued coordinated statements refuting the hackers' assertions. Both entities conducted forensic examinations of the interbank network infrastructure, transaction logs, and account access records. Their investigations found no technical evidence of unauthorized system penetration, data exfiltration, or anomalous account activity consistent with the claimed breach. The Bank of Israel confirmed the operational integrity of its financial transfer systems remained uncompromised throughout the alleged incident period. No disruptions to banking services, fraudulent transactions, or customer data leaks were reported or detected by monitoring mechanisms. The authorities maintained standard cybersecurity protocols without implementing emergency containment measures, as their analysis concluded no actionable threat materialized from the unsubstantiated claims.