A US branch of the Industrial and Commercial Bank of China (ICBC) has been hit by a ransomware attack. The attack began on Wednesday and is still ongoing at the time of writing. It is not yet clear who is behind the attack.

The Industrial and Commercial Bank of China (ICBC), the largest bank in China, reported ICBC FS website That the attack limits access to “certain systems.” For example, employees no longer have access to the email system. When the attack was detected, the affected systems were disconnected from the Internet so that the ransomware could not spread further. It also informed the police and other relevant authorities about the ransomware attack. Branches of the Industrial and Commercial Bank of China (ICBC) in other countries and branches in New York are not affected because their systems are separate from those of the Industrial and Commercial Bank of China (ICBC FS).

It is not yet known who was behind the attack and what demands were made. Many cybersecurity experts suspect Lockbit is behind the attack Reuters writes. However, the group publishes the names of its victims on its website, and in the case of ICBC FS, this has not yet happened. Alan Liska, a ransomware expert, told Reuters that groups do not always publish the name during negotiations with the victim. “It’s not often that such a large bank falls victim to such a sabotage attack,” Liska says.