Hackers Breach Myanmar’s AYA Bank, Leak 120 GB of Data

Ayeyarwady Bank, or AYA Bank, is one of Myanmar’s leading private banks. The cybersecurity incident involved a decommissioned legacy portal. The bank said the exposed material consisted of some nonfinancial application records and that its core banking and payment systems were unaffected. The breach nevertheless highlights the risks surrounding legacy-system management and customer-data protection.

AYA Bank recently confirmed that its legacy portal had been accessed without authorization. Hacker group LAPSUS$ claimed it stole more than 120 GB of data and threatened to publish the information unless the bank paid a ransom. The bank did not disclose the exact date of the intrusion, the number of people affected or the ransom amount. Its core banking and payment services have continued to operate normally to date.