Personal information belonging to more than 1.8 million users in Bangladesh has surfaced on the dark web, alongside at least 17,362 sets of login credentials, exposing significant vulnerabilities in the country’s digital infrastructure, according to a cybersecurity assessment.
The findings, released by CyberStation, the cybersecurity division of Brain Station 23 PLC, highlight widespread risks of personal data exposure across government services, telecommunications, technology and other sectors.
The report was presented at the “Bangladesh Cyber Resilience Briefing 2026”, held at Brac Centre on Thursday (15 October), bringing together around 150 representatives from government agencies, financial institutions, telecommunications operators, educational institutions and technology organisations.
As part of the assessment, CyberStation examined 767 domains spanning 15 sectors and identified evidence of personal data exposure in nearly all of them.
Government services accounted for the largest proportion of exposed citizens’ information, while the technology and telecommunications sectors recorded the highest rates of data exposure, the report found.
The researchers cautioned that the identified figures represented minimum estimates, suggesting the actual scale of exposure could be considerably greater.
The findings have raised concerns about the potential misuse of compromised information, including identity theft, financial fraud and unauthorised access to online accounts.
Mohibbullah Moktadir Tanim, head of cybersecurity services at CyberStation, underscored the importance of identifying security vulnerabilities before cybercriminals could exploit them.
“We cannot mitigate risks that we cannot see,” he said. Tanim stressed that understanding which information had been exposed was essential to developing timely and effective protective measures.
The briefing also addressed Bangladesh’s dependence on foreign software and the need to strengthen domestic cybersecurity capabilities.
Brain Station 23 Executive Director M J Ferdous emphasised reducing reliance on overseas software solutions as part of efforts to build a more resilient national cybersecurity infrastructure.
Cybersecurity analyst Tanvir Hasan Zoha called for greater public awareness of digital threats and stronger preventive strategies to protect sensitive information.
A panel discussion explored the growing risks associated with personal data circulating on the dark web, where stolen information can be traded or exploited for fraudulent activities.
Participants stressed that tackling such threats would require closer coordination among government authorities, private organisations, regulatory bodies and cybersecurity professionals.
The findings add urgency to calls for improved monitoring, stronger data protection practices and proactive measures to safeguard citizens’ digital information.