ACI Logistics Ltd. Statement on Shwapno Customer Data Breach

This morning, DigiBanglaTech.news reported a leak of customer data from the database of Bangladesh’s leading supermarket chain, Shwapno. The news quickly spread across social media and mainstream outlets. Later in the day, ACI Logistics Ltd., the parent company of Shwapno, has issued a clarification following reports of a customer data breach on Saturday evening. 

Earlier in the day, Shwapno’s Managing Director, Sabbir Hasan Nasir, confirmed that hackers had demanded USD 1.5 million (approximately BDT 180 million) in ransom after breaching the company’s database. He stressed that Shwapno refused to comply with such unlawful demands, in line with its institutional policy and ethics, and assured customers that sensitive financial information remains secure.

In its statement, ACI Logistics emphasized that legal action has already been initiated. A case is being processed at Tejgaon Industrial Area Police Station, and the incident has been formally reported to the Counter Terrorism and Transnational Crime (CTTC) Unit as well as other intelligence agencies. The company said strict legal measures are underway with their support.

ACI’s MIS Department conducted a detailed audit under the direct supervision of the Director of MIS, implementing immediate preventive measures after reviewing the system’s condition. The company highlighted that it has strengthened its IT infrastructure with next-generation firewalls, enterprise-grade server security solutions, advanced endpoint protection, and antivirus systems across all servers, headquarters, and outlets nationwide. Firewall logs and network traffic are now monitored round-the-clock by dedicated cybersecurity specialists from both local and international teams.

ACI assured customers that Shwapno’s outlets operate on a secure offline intranet system, ensuring uninterrupted services even during cyberattacks. Customers were advised to remain cautious against phishing calls or fraudulent messages, and reminded that Shwapno never asks for passwords or OTPs over the phone.

The company noted that ransomware groups such as LockBit and Qilin have targeted many major international corporations, underscoring the global scale of such threats. ACI reiterated its commitment to transparency and accountability, assuring customers that their sensitive personal financial data remains protected.

DBTech/IH/MUM