Iran

Iran’s government oversees a range of national functions that include domestic surveillance, energy distribution, financial services, heavy industry, and state‑run media. The surveillance camera network described in the 2026 incident was deployed to monitor internal dissent and was later exploited by foreign actors to track senior officials. Petrol stations across the country are operated as part of the national fuel distribution system, a sector that suffered a widespread cyber disruption in December 2023. The central banking institution, which manages the nation’s monetary policy and payment infrastructure, was targeted in a September 2022 cyberattack that prompted an official investigation. Iran’s steel industry, particularly southern production facilities, provides essential materials for construction and manufacturing and was hit by a cyber incident in June 2022. State television and radio broadcasts, which disseminate government messaging and cultural content, were interrupted by hackers in January 2022, revealing vulnerabilities in the country’s media apparatus.

The scale of these operations can be inferred from the reported impacts of the cyber incidents. In the petrol station attack, approximately seventy percent of stations were initially affected, with service later restored to nearly half of the network. The 2019 bank‑account breach exposed the details of fifteen million debit cards belonging to customers of three sanctioned banks, indicating the breadth of the financial sector’s digital footprint. The surveillance network compromise involved numerous cameras nationwide, suggesting a extensive monitoring apparatus deployed across urban and public spaces. The steel industry disruption temporarily halted operations at southern facilities, reflecting the sector’s contribution to national output. The state‑media intrusion affected multiple channels simultaneously, demonstrating the reach of Iran’s broadcasting infrastructure.

Distinguishing attributes of Iran’s governmental posture include its frequent attribution of cyber incidents to foreign adversaries, especially Israel, and its own claims of dismantling alleged foreign espionage networks, such as the U.S.‑linked operation announced in June 2019. The country’s experience shows a pattern of critical infrastructure being targeted in retaliation for regional tensions, prompting Iranian officials to highlight vulnerabilities and call for improved defenses. As a sovereign state, Iran’s organizational structure is not defined by corporate ownership or parent‑subsidiary relationships but by its constitutional governance and the various ministries and agencies that administer the sectors described. This unique position as both a target and a actor in cyber hostilities shapes its approach to securing national assets.