Ransomware victim disclosure
← All victimsBanco Latinoamericano de Comercio Exterior (Bladex)
listed as bladex.com · Claimed by lockbit5 · listed 25 days ago
Status timeline
- Listed
Apr 26, 2026
- Data leaked
At a glance
- Group
- lockbit5
- Status
- Data leaked
- Country
- PA
- Sector
- Technology
- Listed on leak site
- Apr 26, 2026
About the victim
AI dossier — public-source company profileBanco Latinoamericano de Comercio Exterior (Bladex) is a multinational trade finance bank headquartered in Panama City, Panama, originally established by the central banks of Latin American and Caribbean nations. The bank specializes in facilitating international trade transactions and providing financial solutions to corporations and financial institutions across Latin America and beyond. Bladex is publicly listed on the NYSE under the ticker BLX and maintains a presence across Latin America and the United States.
- Industry
- Trade Finance & International Banking
- Address
- Panama City, Panama
- Employees
- 201-500
- Founded
- 1979
Attack summary
Severity: critical — Bladex is a publicly traded multinational bank handling international trade finance; a confirmed data publication by ransomware operators implies exposure of regulated financial data, banking records, corporate client PII, and potentially transaction-level data at scale — all qualifying as critical under financial sector sensitivity thresholds.LockBit 5 claims to have attacked Bladex and has published data, indicating exfiltration of company data with disclosure already confirmed; no ransom amount or specific data volume was stated in the post.
Data the group says was taken
AI dossier — extracted from the leak post- Financial records
- Trade finance transaction data
- Corporate client information
- Investor documentation
- SEC filings and reports
- Employee records
- Internal banking operations data
What the group claims
Bladex, a multinational bank originally established by the central banks of Latin-American and Carib...
Sources
Source
Indexed 25 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
