What he should have done is gone to the credit agencies like Visa and Mastercard who would likely cut off the banks accounts in very quick order, thereby forcing the banks to fix the security hole. Even though a debit visa isn't touching the bank's money, the big credit companies take these things rather seriously if it has their name on it.
These aren't Visa or Mastercard issued cards, but Iran's own. The stupidity in your post, oh my god.
So, in my view, the hacker did good, because the people in charge weren't listening, so it made them listen.
I think you missed the point. He didn't "make them listen". The banks haven't fixed the security problem. All they have done is asked their customers to change their PIN as well as blocking some ATMs.
How do you know this? Are you in Iran and working for the banks? Even the article notes that they might have silently fixed, or are in the process of fixing them. Most of the ATM's have stopped giving out money. I think that clearly shows they are working on it. Or do you think they will just close it all down and never start working again?
Statistics are no substitute for judgement. -- Henry Clay