Agrani Bank reports data breach through stolen from staff email
Learn More
Agrani Bank Limited, a state-owned financial institution in Bangladesh, is reporting a data breach resulting in the theft of client data by the hacker group "KillSec." This breach impacted approximately 12,000 clients of the bank. The attack was executed through compromise of employee email accounts.
The attackers demanded a ransom of EUR 5,000 (around 628,000 BDT) on May 17, 2024, to delete the stolen data. After failing to receive the ransom, the hackers released the client data on the dark web on June 6, 2024.
The exposed data includes:
- Copies of various office orders
- Details of provident funds of bank staff
- Loan details of account holders
- Orders on quick disbursement of funds
Agrani Bank authorities claim that no hacking took place at the bank itself, asserting instead that the emails of several staff members were compromised.
