The bank's U.S. arm was hit by a ransomware attack that disrupted trades in the U.S. Treasury market last Thursday.
"They paid a ransom, deal closed," the Lockbit representative told Reuters via Tox, an online messaging app.
ICBC did not immediately respond to a request for comment.
(Reporting by James Pearson; Editing by David Goodman)
By James Pearson