Unauthorized access to military computer data serves as a gateway for various cybercrimes and threats, including the illicit acquisition of military data, cyber espionage, cyberattacks on military infrastructure, and the destruction of critical military computer systems. Clause (A) of Article 731 of the Islamic Penal Code (IPC) only generally addresses unauthorized access to "secret" data. Furthermore, Article 131 of the Law on Armed Forces Crimes lacks explicit provisions regarding unauthorized access to both classified and non-classified military data and computer information. The sensitive and strategic nature of military computer data and systems necessitates the adoption of proportionate measures in both criminalization and sentencing. This research evaluates Iran’s current criminal policy concerning unauthorized access to military systems and investigates whether significant legal gaps exist, or if other statutes compensate for these deficiencies. Utilizing a descriptive-analytical method based on library resources, the study concludes that Iran’s criminal policy regarding access to classified and non-classified military data—by both military and civilian personnel—fails to uphold the principle of deterrence and the principle of proportionality of crime and punishment. Consequently, legal reforms are essential to address these legislative gaps by enacting measures that reflect the critical importance of military computer data, for which specific recommendations are proposed.