The website of Evaly, a controversial Bangladeshi e-commerce platform, appeared to be hacked on 24 May, with a message claiming the attacker has access to the platform’s customer data and demanding contact from the company.

Visitors to the site on Saturday morning were greeted with a bold notice reading: “HACKED, I HAVE ALL CUSTOMER DATA. EVALY STAFF PLEASE CONTACT 00watch@proton.me.” The message included an ultimatum: “OR ELSE I WILL RELEASE THIS DATA TO THE PUBLIC.”

It remains unclear what data may have been accessed or whether it includes sensitive personal or financial information. Evaly has not yet issued a statement on the breach, and the claim has not been independently verified.

The incident comes amid mounting legal troubles for Evaly. On 13 April, a Dhaka court sentenced the company’s managing director, Mohammad Rassel, and chairperson, Shamima Nasrin, to three years in prison for fraud. The verdict followed a case filed by a customer, Md Rajib, who claimed he paid BDT 12.37 lakh for five motorcycles that were never delivered.

Evaly, once known for deep discounts and flashy marketing, has faced several legal and financial setbacks since 2021, including fraud allegations and customer complaints over undelivered goods.

The latest breach raises concerns about data security and customer protection in Bangladesh’s growing but loosely regulated e-commerce sector.