More than 18 lakh user records and at least 17,362 sets of login credentials linked to Bangladesh have been found on the dark web, according to a report by CyberStation, cybersecurity division of Brain Station 23 PLC.
The findings were presented at the Bangladesh Cyber Resilience Briefing 2026, held at BRAC Centre Inn in Dhaka yesterday as part of Cybersecurity Awareness Month.
Around 150 representatives from the government, banking, telecommunications, technology and education sectors, along with regulators and cybersecurity professionals, attended the event.
CyberStation assessed 767 domains across 15 sectors and found evidence of exposed personal information across almost all of them. Government services accounted for the largest share of exposed citizen records, while technology and telecommunications had the highest rates of data exposure, according to a press release.
The company said the figures are conservative estimates and that the actual scale of exposure could be higher.
“We cannot address risks that we cannot see. Our goal is to help organisations understand what information has been exposed and act before cybercriminals can misuse it,” said Muhibbul Muktadir Tanim, head of cybersecurity services at CyberStation.
MJ Ferdous, executive director of Brain Station 23, stressed the need to reduce dependence on foreign software and strengthen Bangladesh’s domestic cybersecurity capabilities.
Cybersecurity analyst Tanvir Hassan Zoha highlighted the importance of raising awareness and developing effective prevention strategies. A panel discussion at the event focused on the risks of data exposure on the dark web and ways to tackle them. The participants stressed the need for coordinated action to prevent the misuse of personal information.