Bangladesh Cyber Watch
Reports since 1 Jan 2026. Not a live feed.
Threat level, Bangladesh
Background readingHacktivismIncident response
No public level found
No published national cyber threat level found for Bangladesh, checked 7 Nov 2026. Bangladesh publishes no cyber threat level; BGD e-GOV CIRT issues alerts, advisories and holiday situational-awareness notices.
Source: BGD e-GOV CIRT
From official agencies
| Date | Agency | Advisory or alert |
|---|
Agency headlines, unedited.
Compare countries
| Country | Threat level | Confirmed | Claimed only | Via a vendor | Latest report |
|---|---|---|---|---|---|
 Malaysia | Medium | 19 | 35 | 7 | 7 Nov 2026 |
 Singapore | None published | 12 | 24 | 3 | 7 Nov 2026 |
 Indonesia | None published | 6 | 32 | 0 | 5 Nov 2026 |
 Thailand | None published | 9 | 33 | 0 | 3 Nov 2026 |
 Philippines | None published | 9 | 35 | 4 | 7 Nov 2026 |
 Vietnam | None published | 5 | 34 | 0 | 5 Nov 2026 |
 Israel | None published | 4 | 2 | 0 | 7 Nov 2026 |
 Iran | None published | 4 | 0 | 0 | 13 Jun 2026 |
 United Arab Emirates | None published | 4 | 4 | 1 | 7 Oct 2026 |
 Saudi Arabia | None published | 2 | 5 | 0 | 12 Oct 2026 |
 Egypt | None published | 1 | 4 | 1 | 29 Oct 2026 |
 South Africa | None published | 8 | 0 | 1 | 26 Oct 2026 |
 Nigeria | None published | 2 | 3 | 0 | 8 Aug 2026 |
 Kenya | None published | 1 | 6 | 0 | 25 Jul 2026 |
 India | None published | 9 | 2 | 1 | 28 Oct 2026 |
 Pakistan | None published | 3 | 3 | 0 | 22 Jul 2026 |
| Bangladesh | None published | 1 | 5 | 0 | 23 Oct 2026 |
 Sri Lanka | None published | 4 | 3 | 1 | 1 Jul 2026 |
 Cambodia | None published | 0 | 3 | 0 | 10 Jun 2026 |
 Myanmar | None published | 1 | 5 | 0 | 25 Oct 2026 |
 Brunei | None published | 0 | 0 | 0 | |
 Poland | BRAVO-CRP | 5 | 0 | 4 | 1 Oct 2026 |
 Ukraine | None published | 7 | 0 | 1 | 4 Nov 2026 |
 Russia | None published | 7 | 0 | 1 | 1 Nov 2026 |
 Czechia | None published | 3 | 0 | 1 | 22 Oct 2026 |
 Romania | None published | 2 | 0 | 0 | 14 Jul 2026 |
 Estonia | None published | 5 | 0 | 3 | 4 Nov 2026 |
 Turkey | None published | 3 | 0 | 1 | 16 Sep 2026 |
 United Kingdom | None published | 5 | 1 | 3 | 2 Nov 2026 |
 Germany | None published | 4 | 0 | 1 | 2 Nov 2026 |
 France | None published | 7 | 0 | 2 | 4 Nov 2026 |
 Netherlands | None published | 5 | 1 | 1 | 2 Nov 2026 |
 Italy | None published | 5 | 0 | 0 | 7 Nov 2026 |
 Spain | None published | 3 | 0 | 0 | 5 Feb 2026 |
 Ireland | None published | 3 | 4 | 0 | 2 Nov 2026 |
 Sweden | None published | 5 | 3 | 2 | 2 Nov 2026 |
 United States | None published | 6 | 0 | 2 | 28 Aug 2026 |
 Canada | None published | 5 | 0 | 1 | 21 Aug 2026 |
 Mexico | None published | 2 | 4 | 1 | 21 Aug 2026 |
 Brazil | None published | 2 | 2 | 0 | 2 Nov 2026 |
 Argentina | None published | 1 | 2 | 0 | 4 Aug 2026 |
 Chile | None published | 1 | 2 | 0 | 2 Nov 2026 |
 Colombia | None published | 1 | 2 | 0 | 4 Nov 2026 |
 Japan | None published | 9 | 0 | 5 | 4 Nov 2026 |
 South Korea | Caution | 6 | 0 | 2 | 29 Oct 2026 |
 China | None published | 0 | 3 | 0 | 7 Aug 2026 |
 Taiwan | None published | 9 | 0 | 2 | 3 Nov 2026 |
 Hong Kong | None published | 3 | 0 | 3 | 30 Oct 2026 |
 Australia | None published | 5 | 0 | 1 | 2 Nov 2026 |
 New Zealand | None published | 7 | 2 | 1 | 3 Sep 2026 |
2026 counts. Click a row to open a country.
Official numbers
| Measure | Value | Period | Source |
|---|
Who is targeting it
| Group | Kind | What it did | Sources | Reports |
|---|---|---|---|---|
| SideWinder-associated cluster | State-aligned | BGD e-GOV CIRT found Bangladesh government systems on target lists in September 2026 and said attribution is not conclusive. | BGD e-GOV CIRT | |
| SideCopy | State-aligned | BGD e-GOV CIRT issued a September 2026 advisory on a SideCopy campaign using weaponised LNK files and a fileless RAT. | BGD e-GOV CIRT |
Laws and rules this year
Full stories
Official statements
- 25 Oct 2026BGD e-GOV CIRT said many Bangladesh web apps still run outdated PHP and some notified owners have not fixed them. BGD e-GOV CIRT
- 17 Sep 2026BGD e-GOV CIRT warned of a SideWinder-associated campaign aimed at South Asian government and financial infrastructure. BGD e-GOV CIRT
Incidents
7 of 7 incidents
| What happened | Sources | |||||
|---|---|---|---|---|---|---|
 ⚠️ ClaimedLabaid Cancer Hospital and Super Speciality Centre | 23 Oct 2026 | Health | Ransomware | Claimed. Qilin listed the hospital on its leak site. No statement from the hospital was found. | ransomware.live✓ 8 Nov | |
 ⚠️ ClaimedPalli Karma-Sahayak Foundation (PKSF) | 28 Sep 2026 | Finance | Ransomware | Claimed. MedusaLocker listed the state-backed microfinance apex body on its leak site. | ransomware.live✓ 8 Nov | |
 ⚠️ ClaimedBRAC | 16 Jul 2026 | Other | Ransomware | Claimed. The Gentlemen listed BRAC on its leak site and threatened to publish data. BRAC has not commented. | ransomware.live✓ 8 Nov | |
 ⚠️ ClaimedBank Asia | 27 Apr 2026 | Finance | Data leak | Claimed. APT73 listed bankasia-bd.com on its leak site. No statement from the bank was found. | ransomware.live✓ 8 Nov | |
| ⚠️ ClaimedNOVOAIR | 27 Apr 2026 | Transport | Data leak | Claimed. APT73 listed the private airline's domain novoair-bd.com on its leak site the same day as Bank Asia. | ransomware.live✓ 8 Nov | |
 ✅ ConfirmedShwapno (ACI Logistics) | 28 Mar 2026 | Retail | Ransomware | Confirmed. Shwapno said hackers breached its customer database and demanded $1.5 million. It is working with forensic experts and the police CTTC unit. Claimed. Qilin listed Shwapno on its leak site on 17 March 2026. | The Business Standard · ransomware.live✓ 8 Nov | |
 🚫 DisputedBangladesh Election Commission | 31 Jan 2026 | Government | Data leak | None | Response. The EC conceded that applicants' names and NID details were briefly viewable on its journalist accreditation site, but said there was no download option and no misuse. Claimed. Press reports said a URL flaw exposed the NID details, photos and signatures of about 14,000 journalists for around two hours on 31 January. | Views Bangladesh · The Business Standard✓ 8 Nov |
FAQ
Does Bangladesh have a national cyber threat level?
No published national cyber threat level was found for Bangladesh (checked 7 Nov 2026). Bangladesh publishes no cyber threat level; BGD e-GOV CIRT issues alerts, advisories and holiday situational-awareness notices.
Which organisations in Bangladesh confirmed cyber incidents recently?
1 incident confirmed since January 2026: Shwapno (ACI Logistics).
Which Bangladesh organisations appear on ransomware or leak sites?
6 claims, not confirmed by the organisations: Labaid Cancer Hospital and Super Speciality Centre, Palli Karma-Sahayak Foundation (PKSF), BRAC, Bank Asia, NOVOAIR and Bangladesh Election Commission.
What counts as a confirmed incident?
The organisation, a regulator, the police or a minister has said something happened, as reported by a named outlet. Everything else is listed as claimed.
Why list leak-site claims at all?
Ransomware and extortion crews post victims on leak sites before anyone confirms. The list shows what attackers say. Treat it as a lead and check with the organisation.
Is the map a live attack feed?
No. It counts incidents and claims reported in 2026. Live attack maps from security vendors show scanning traffic hitting their sensors, which does not mean a place was attacked.
How often is it updated?
By hand when a national level changes or a notable incident is reported. The date is shown in the header.
Sources: official statements and regional press, including Bernama, The Star, Malay Mail, CNN Indonesia and Newsbytes.PH; leak-site claims from public ransomware trackers. Each entry links its source.