According to The Daily Star, Shwapno parent company ACI Logistics filed a police report stating that computers at its headquarters were locked by ransomware on August 19, 2025 [1]. The police filing described how an employee first received a phishing email containing a malicious link, after which the company disconnected affected systems and removed the malware [1]. According to the report, exposed data included customer contact and purchase records, supplier documents, and internal operational information, and police have referred the case to their cyber unit [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Mar 29, 2026 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
Shwapno Parent Company Files Police Report Detailing 2025 Ransomware Incident
1 min read
- Disclosed
- Mar 29, 2026
- Occurred
- Aug 19, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
According to the report, exposed data included customer contact and purchase records, supplier documents, and internal operational information, and police have referred the case to their cyber unit [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
According to the report, exposed data included customer contact and purchase records, supplier documents, and internal operational information, and police have referred the case to their cyber unit [1].
Source excerpt: "Bangladesh’s largest supermarket chain Shwapno has filed a general diary (GD) with Tejgaon Industrial Area Police Station, seven months after its customer database was compromised in a cyberattack." [1].
References
Media1
- [1]
“Bangladesh’s largest supermarket chain Shwapno has filed a general diary (GD) with Tejgaon Industrial Area Police Station, seven months after its customer database was compromised in a cyberattack.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.