RCBC sues Bank of Bangladesh for 'defamation' after $81-M cyber heist

RCBC sues Bank of Bangladesh for 'defamation' after $81-M cyber heist

MANILA, Philippines — Rizal Commercial Banking Corp. on Tuesday said it filed a lawsuit against the Bank of Bangladesh for “defaming” the Philippine bank and its officials in the wake of one of the biggest-ever cyber heists.

Unidentified hackers stole $81 million in February 2016 from the Bangladesh central bank's account with the US Federal Reserve in New York.

The money was transferred to a Manila branch of the RCBC, then quickly withdrawn and laundered through local casinos.

In a statement, the Yuchengco-led lender disclosed that the complaint was filed on March 6 with the Regional Trial Court in Makati City, saying that the bank’s “reputation has come under the vicious public attack by Bangladesh Bank since 2016.”

“It is public knowledge that Bangladesh Bank has embarked on a massive ploy and scheme to extort money from plaintiff RCBC by resorting to public defamation, harassment and threats geared towards destroying RCBC’s good name, reputation, and image, all with the intention of getting RCBC to pay Bangladesh Bank money that RCBC does not have in its custody or possession and which does not owe to Bangladesh Bank,” RCBC said.

Last January, Bangladesh central bank governor Fazle Kabir said the case will be filed against RCBC and "all others" involved in the heist to try and retrieve the stolen funds.

An agreement between the bank and the US Federal Reserve in New York had been signed to assist Dhaka in the case, he added.

Bangladesh has sent a legal team to New York and is prepared to fight for the money to be returned, Kabir told reporters in the capital Dhaka.

Shares in RCBC were down 19 percent to close at P26.50 apiece on Tuesday.

‘Massive cover-up’

The Philippines in 2016 imposed a record $21 million fine on RCBC after investigating its role in the audacious cyber heist.

The bank has rejected the allegations and in 2017 accused Bangladesh's central bank of a "massive cover-up".

According to RCBC, the defamation suit references Bangladesh’s “failures to secure its network and disclose those failing on a timely basis.”

The bank also said the complaint “refutes Bangladesh’s allegation that RCBC played a premeditated role in the cyber theft.”

Last January, ex-RCBC manager Maia Deguito was handed a lengthy jail term and $109 million in fines in the first conviction over the massive theft.

She plans to appeal and can remain free on bail until the conviction is finalized. Deguito is the only person who has been convicted in the case, drawing international concern.

The theft exposed the Philippines as a haven for dirty money, where some of the world's strictest bank secrecy laws protect account holders from scrutiny.

The hackers bombarded the US Federal Reserve with dozens of transfer requests, attempting to steal a further $850 million.

But the bank's security systems and typing errors in some requests prevented the full theft.

The hack took place on a Friday, when Bangladesh's central bank is closed. The Federal Reserve is closed on Saturday and Sunday, slowing the response.

The US Federal Reserve, which manages the Bangladesh central bank account, has denied its own systems were breached. — Ian Nicolas Cigaral with AFP