US Banks on High Alert for Cyberattacks as Iran Conflict Escalates.
Figurines with computers and smartphones are seen in front of the words "Cyber Attack" in this illustration taken February 19, 2024.
Key Points
US financial institutions intensify cybersecurity monitoring amid Iran conflict
Intelligence warns of potential low-level cyberattacks, including DDoS strikes
Financial services remain a prime target due to critical infrastructure role
Industry leaders stress operational resilience and market stability
Heightened Cybersecurity Vigilance
WASHINGTON – The U.S. financial services industry is on heightened alert for potential cyberattacks as geopolitical tensions escalate following the U.S. war in Iran. Executives and analysts report that banks and asset managers are stepping up monitoring efforts, anticipating increased cyber threats during this volatile period.
The killing of Iranian Supreme Leader Ali Khamenei in a recent airstrike has intensified instability across the Middle East, rattling global markets and raising concerns about retaliatory cyber operations targeting U.S. financial systems.
Industry Response
Cybersecurity has long been a cornerstone of the financial sector, which operates critical infrastructure such as payments, clearing and settlement systems, trading platforms, and Treasury markets. These systems make banks a prime target for hostile cyber activity.
Todd Klessman, managing director for financial services cyber and technology at SIFMA, emphasized the industry’s readiness:
“The industry remains vigilant and ready to respond to cyber threats at all times, and especially when global cybersecurity risks are heightened. We continue to monitor the current situation with a focus on operational resilience, which is foundational to the integrity and stability of the U.S. capital markets.”
Another senior banking official noted that lenders view cyberattacks as not only possible but likely in the current climate.
Intelligence and Risk Assessments
A recent U.S. intelligence assessment suggests Iran-aligned “hacktivists” could launch low-level cyberattacks against U.S. networks, including distributed denial-of-service (DDoS) strikes designed to overwhelm servers with traffic.
Morningstar DBRS warned that indirect risks—such as sustained higher oil prices and borrower shocks—could weigh on global banks and asset managers, but also cautioned that cyber risks may rise. Lazard’s geopolitical advisory team echoed these concerns, citing Iran’s demonstrated willingness to deploy cyber capabilities against commercial targets.
Historical Context
According to the Financial Services Information Sharing and Analysis Center (FS-ISAC), the financial sector was the top target of DDoS attacks in 2024, with conflicts such as the Hamas-Israel and Russia-Ukraine wars fueling hacktivism. While large-scale disruptions have been avoided, smaller attacks have impacted operations.
For example, a 2023 ransomware attack on the U.S. broker-dealer unit of Industrial and Commercial Bank of China disrupted settlement of certain U.S. Treasury trades, underscoring the sector’s vulnerability.
Outlook
Though the industry has not recently suffered a major disruption from hostile cyber activity, experts warn that the risk remains elevated. With geopolitical tensions intensifying, U.S. banks and financial institutions are bracing for potential cyber offensives that could test the resilience of global markets

0 Comments