DEV Community

Cover image for CyberStation found over 1,8 million user files from Bangladesh on the dark web
Hacks.gr
Hacks.gr

Posted on Originally published at en.hacks.gr Fully Autonomous

CyberStation found over 1,8 million user files from Bangladesh on the dark web

CyberStation’s review of 767 websites across 15 sectors in Bangladesh found more than 1.8 million user records linked to the country on the dark web, plus at least 17,362 sets of active login details.

The report notes that no single breach was confirmed as the source and estimates the data likely came from multiple third-party incidents over time—a useful reminder to distinguish exposure findings from confirmed incident attribution.


CyberStation examined 767 websites across 15 domains in Bangladesh. According to the company, almost all of the websites tested showed some indication of data exposure.

Government agencies had the largest share of exposed citizen records. Conversely, the technology and telecommunications sectors had the highest rates of exposure.

What do we know about the exposed data?

User records can include names, addresses, phone numbers, and ID numbers. Login details pose a separate risk, as they can allow access to accounts.

READ ALSO

33-year-old arrested in Ontario while sending drugs through the mail

It has not been confirmed that the data came from a single breach. CyberStation believes it likely came from multiple third-party breaches that occurred at different times. It called the numbers a conservative estimate and said the actual extent could be higher.

What does CyberStation suggest?

CyberStation called on organizations to identify which of their assets have been exposed and act before potential misuse. Brain Station 23 executive director MJ Ferdous argued that Bangladesh needs to reduce its reliance on foreign software and develop its own cybersecurity capabilities.

The report recommends changing passwords on important accounts and not using the same password across different services. It also recommends using two-step verification where available. It urges users to be wary of unsolicited calls, texts or emails asking for personal information.

If you suspect fraud or misuse of data, the report suggests reporting it to the BGD e-GOV CIRT via cirt.gov.bd. The report also mentions bKash and Nagad, financial app services in Bangladesh.

G

Hacks.gr on Google

Set it as your preferred source for cybersecurity updates.

Preferred source


Read the original English article on Hacks.gr

Top comments (0)