Millions of Bangladeshi citizens’ personal information, including names, birth dates, and National Identification (NID) numbers, has been exposed due to a security exploit in a Bangladeshi government website. The breach was initially reported by TechCrunch and discovered by cybersecurity researcher Viktor Markopoulos. The leaked data, accessible through a simple Google search, consists of over 50 million user records, including applications for government services with transaction IDs and payment amounts.
Despite multiple attempts to contact the Bangladeshi e-Government Computer Incident Response Team (BGD e-GOV CIRT), Markopoulos received no response. However, BGD e-GOV CIRT claims to be unaware of any breaches. Viktor Markopoulos confirmed that the website in question is a Bangladeshi government website with a “.gov.bd” domain. He revealed that the leaked records were applications for government services, as they contained information such as transaction IDs and amounts paid by applicants.
This data breach highlights the importance of robust cybersecurity measures and the need for immediate action to address vulnerabilities and protect individuals’ personal information.
Source for more details:
