Shwapno Supermarket Data Breach Exposes 4 Million Customer Records

Shwapno Supermarket Data Breach Exposes 4 Million Customer Records

First seen 28 Mar 2026, 19:29 UTC Thedailystar 66.0

Article Content

Browse articles
ThreatCluster

Shwapno, Bangladesh's largest supermarket chain, reported a data breach affecting over 40 lakh customers. Hackers compromised the company's database and are demanding a ransom of $1.5 million. The breach, which occurred in December 2025, resulted in the exposure of customer names, phone numbers, and purchase histories. Customers began noticing their information circulating on social media, prompting concerns about the security of their data. Managing Director Sabbir Hasan Nasir confirmed that the company is working with forensic experts and police to investigate the incident. Despite the breach occurring months ago, Shwapno only recently identified the intrusion and has not yet issued a public warning to customers. The company is preparing to file a case against the attackers. The situation highlights the vulnerabilities in Shwapno's cyber defenses and the urgent need for improved security measures.

Key Points: • Shwapno's database breach affects over 4 million customers. • Hackers are demanding a ransom of $1.5 million for data restoration. • Customer data, including names and purchase histories, has been leaked on social media.

Timeline

2025-12-01
Hackers gained control of Shwapno's database and website.
2026-03-28
Shwapno publicly disclosed the data breach and ransom demand.
Recent
Shwapno began working with forensic experts and police.