Interrupción de BNC APP y BNCNET con presunto compromiso atribuido a Qilin

Qué respalda esta fuente

• BNC says a technological platform disruption prevented BNC APP and BNCNET operation
• debit-card POS transactions remained available
• ATMs, 216 agencies and the 24-hour hotline remained available
• BNC says accounts/information were safeguarded and technicians were restoring service
• does not state cyberattack, ransomware, breach, cause or exact start/end time

Límites de la evidencia

The document is hosted by Banca y Negocios rather than an evident BNC-owned domain, has no visible date or signature and could be replaced. It does not identify the cause as malicious.

Relación con el caso

Strongest source for BNC acknowledgement and channel scope, with explicit provenance/date limitations.

Qué respalda esta fuente

• reports failures from approximately 21:00 on 1 July affecting BNC APP/BNCNET
• reports BNC partial restoration around midday 2 July with intermittent access attributed by the bank to high demand
• reports debit/POS unaffected and ATMs/telephone channels available
• quotes the x01x00 taunt but explicitly says its version could not be verified

Límites de la evidencia

The article confirms the outage and BNC response but does not technically establish its cause. It expressly treats the x01x00 claim as unverifiable.

Relación con el caso

Best complete contemporaneous narrative joining the outage, official response and claim while preserving uncertainty.

Qué respalda esta fuente

• caption reports BNC APP/BNCNET interruption and partial restoration
• reproduces BNC statement that debit operations remained active
• calls x01x00 unverified and attributes Qilin/USD 8 million to anonymous VenariX sources
• states BNC did not confirm ransomware

Límites de la evidencia

Social-media reproduction and reporting, not a forensic investigation; the ransomware attribution remains explicitly unconfirmed.

Relación con el caso

Contemporaneous visible preservation of the outage and BNC communiqué with careful qualification of the actor claim.

Qué respalda esta fuente

• exact text addresses @bncbanco_ and asks whether everything is okay
• includes misspelled hashtag #Ramsonware and Good Luck
• does not name Qilin, state responsibility, describe access, demand money or show evidence

Límites de la evidencia

A targeted taunt is not a clear admission and does not establish Qilin identity, malicious causation or compromise.

Relación con el caso

Primary provenance for the x01x00 message mentioned by contemporaneous media.

Qué respalda esta fuente

• says anonymous sources claim Qilin may have compromised BNC
• claims a demand of up to USD 8 million
• quotes an earlier VenariX post that only described a possible incident based on user reports
• provides no artifact, named source, actor statement or technical evidence

Límites de la evidencia

Anonymous-source monitoring claim. It supports provenance of the Qilin/USD 8 million allegation, not its truth.

Relación con el caso

Direct public origin located for the attribution repeated by later media.

Qué respalda esta fuente

• article concerns the April 2026 BNC listing claim
• retrospectively repeats a July 2025 Qilin/USD 8 million narrative
• later paragraph attributes the 2025 claim to VenariX rather than a victim or actor statement

Límites de la evidencia

Published nine months later for the April 2026 publication and not independent confirmation of the 2025 attribution. The relationship between the 2025 and 2026 publications remains unresolved; neither separate intrusions nor dataset identity is established.

Relación con el caso

Retained only as retrospective context and provenance trail; not primary proof of the July 2025 cause.

Qué respalda esta fuente

• Reports customer access failures on 30 June and the bank's generic platform-incidence notice.

Límites de la evidencia

Reported local failure time is not forensic attack onset; generic wording also appears in later bank notices.

Relación con el caso

Bound the observed service interruption and continuity; does not establish cyber cause.

Qué respalda esta fuente

• Reports the same interruption continuing beyond 24 hours and alternatives remaining available.

Límites de la evidencia

Not independent evidence of malicious causation.

Relación con el caso

Bound the observed service interruption and continuity; does not establish cyber cause.

Qué respalda esta fuente

• Reports restoration of the continuing online-service disruption after roughly 48 hours.

Límites de la evidencia

Restoration is continuity evidence, not a new incident or proof of ransomware.

Relación con el caso

Bound the observed service interruption and continuity; does not establish cyber cause.