Jeremiah Cornelius writes: Khosrow Zarefarid warned of the security flaw in Iran’s banking system providing affected institutions of the details, including 1,000 captured bank accounts. When the affected banks, including the largest state institutions didn’t respond, Khosrow then hacked 3 million accounts across at least 22 banks. He then dropped these details — including card numbers and PINs — on his blog: ircard.blogspot.ca. Three Iranian banks Saderat, Eghtesad Novin, and Saman have already warned customers to change their debit card PINs. "Zarefarid is reportedly no longer in Iran, though it is unclear when he left."