Shwapno Files Police Report Over 2025 Ransomware Attack and Data Leak
Summary
Shwapno filed a police report seven months after a reported ransomware attack on its parent company, ACI Logistics. The report says attackers demanded $1.5 million and later leaked over 410 GB of data.
Key points
- ACI Logistics administration head Md Masum Billah filed the GD on March 28; police confirmed it was transferred to the Detective Branch Cyber Unit.
- According to the GD, phishing emails with malicious links targeted Shwapno employees before August 2025.
- The GD says ransomware locked down ACI Logistics head-office computers on August 19, 2025, and Qilin demanded $1.5 million to prevent sensitive data from being released.
- The report says Shwapno’s MIS team disconnected systems and removed malware.
- The GD says attackers later leaked over 410 GB of data through a LockBit 5.0 portal, including customer, supplier, sales, contract, and banking information.
Article Details
- Victim Organization
- ACI Logistics Limited, parent company of Shwapno
- Incident Type
- Ransomware attack and customer-data breach
- Incident Date
- 2025-08-19
- Data Types Exposed
- Customer names
- Phone numbers
- Purchase histories
- Supplier details
- Contracts
- Daily sales records
- Bank deposit information
- Affected Records
- Not disclosed
- Affected Data Size
- Over 410 GB of data reportedly leaked
- Operational Impact
- Head-office computers were locked by ransomware. Shwapno’s MIS team disconnected systems and removed malware. The GD cited risks of financial, operational, and reputational damage.
- Ransom Or Extortion
- According to the GD, Qilin demanded US $1.5 million to prevent the release of sensitive data and set a 10-day deadline. The article reports that over 410 GB was later leaked via the LockBit 5.0 portal.
- Claim Status
- confirmed