https://pwnsy.com/tools/cyber-watch/bangladesh/Sourced cyber incidents and official statements, from pwnsy Cyber Watch.enSun, 08 Nov 2026 00:00:00 +0000https://www.cirt.gov.bd/alerts/unresolved-php-security-bangladesh6529ee9b69af6a24Sun, 25 Oct 2026 00:00:00 +0000BGD e-GOV CIRT said many Bangladesh web apps still run outdated PHP and some notified owners have not fixed them.https://pwnsy.com/tools/cyber-watch/bangladesh/#alld5e288f1e39943d2Fri, 23 Oct 2026 00:00:00 +0000Qilin listed the hospital on its leak site. No statement from the hospital was found. Sources: https://www.ransomware.live/id/TGFiYWlkIENhbmNlciBIb3NwaXRhbCBBbmQgU3VwZXIgU3BlY2lhbGl0eSBDZW50ZXJAcWlsaW4https://pwnsy.com/tools/cyber-watch/bangladesh/#all95a358b272e7de63Mon, 28 Sep 2026 00:00:00 +0000MedusaLocker listed the state-backed microfinance apex body on its leak site. Sources: https://www.ransomware.live/id/UEtTRiDigJQgUGFsbGkgS2FybWEtU2FoYXlhayBGb3VuZGF0aW9uQG1lZHVzYWxvY2tlcghttps://www.cirt.gov.bd/advisories/sidewinder-associated-campaignc66a1c96ce4ed8dbThu, 17 Sep 2026 00:00:00 +0000BGD e-GOV CIRT warned of a SideWinder-associated campaign aimed at South Asian government and financial infrastructure.https://pwnsy.com/tools/cyber-watch/bangladesh/#alld2fdab12e507aac1Thu, 16 Jul 2026 00:00:00 +0000The Gentlemen listed BRAC on its leak site and threatened to publish data. BRAC has not commented. Sources: https://www.ransomware.live/id/QlJBQ0B0aGVnZW50bGVtZW4https://pwnsy.com/tools/cyber-watch/bangladesh/#allfb12830134a9ae9cMon, 27 Apr 2026 00:00:00 +0000APT73 listed bankasia-bd.com on its leak site. No statement from the bank was found. Sources: https://www.ransomware.live/id/YmFua2FzaWEtYmQuY29tQGFwdDczhttps://pwnsy.com/tools/cyber-watch/bangladesh/#alld8b2e33ee25784c5Mon, 27 Apr 2026 00:00:00 +0000APT73 listed the private airline's domain novoair-bd.com on its leak site the same day as Bank Asia. Sources: https://www.ransomware.live/id/bm92b2Fpci1iZC5jb21AYXB0NzMhttps://pwnsy.com/tools/cyber-watch/bangladesh/#all3423a04236666800Sat, 28 Mar 2026 00:00:00 +0000Shwapno said hackers breached its customer database and demanded $1.5 million. It is working with forensic experts and the police CTTC unit. Qilin listed Shwapno on its leak site on 17 March 2026. Sources: https://www.tbsnews.net/node/1396081, https://www.ransomware.live/id/U2h3YXBub0BxaWxpbghttps://pwnsy.com/tools/cyber-watch/bangladesh/#allfbab3d71a13edfa8Sat, 31 Jan 2026 00:00:00 +0000The EC conceded that applicants' names and NID details were briefly viewable on its journalist accreditation site, but said there was no download option and no misuse. Press reports said a URL flaw exposed the NID details, photos and signatures of about 14,000 journalists for around two hours on 31 January. Sources: https://viewsbangladesh.com/ecs-explanation-over-information-leak-of-14000-journalists, https://www.tbsnews.net/node/1349126