Personal Information of Millions of People in Bangladesh Has Leaked

A recent event involving a Bangladeshi government website resulted in a significant data breach, exposing the private information of many citizens.

Cybersecurity researcher Victor Markopoulos, associated with BitCrack Cyber Security, an international organization focused on cybersecurity, has raised serious concerns about the incident.

The Details

On June 27, Markopoulos stumbled upon the leaked data and promptly contacted the Bangladesh Government's Computer Incident Response Team (BGD e-Gov CIRT) to report the breach. According to Markopoulos, the exposed information includes names, phone numbers, email addresses, and national identification numbers of countless citizens in Bangladesh.

Verification

TechCrunch, a reputable technology news company, has independently verified the authenticity of this data breach. Utilizing a "public search tool" on the compromised website, they discovered additional sensitive information within the breached database. This includes details like parents' names and registration application records, obtained using ten different data types.

Government Response

The government website responsible for the breach has not been explicitly named by TechCrunch. However, the BGD e-Gov CIRT, led by Mohammad Saiful Alam Khan, has confirmed its active involvement in addressing the issue. Regrettably, TechCrunch's endeavors to obtain clarification from multiple government institutions, such as the Press Office, the Bangladesh Embassy in Washington D.C., and the Consulate General of Bangladesh in New York, via email, have remained unanswered.

Implications and Risks

Bangladesh's national identification cards are issued to citizens aged 18 or older, with birth registration being, a prerequisite for children. The compromised data could potentially be misused for activities such as identity theft, modifying or deleting applications, and verifying birth registration records. Markopoulos warns that these risks extend to web applications and highlights the significance of safeguarding personal information.

The Conclusion

The magnitude of this data breach in Bangladesh's government website is cause for serious concern. The exposure of citizens' personal information, including sensitive identifiers, demands immediate action to mitigate risks and ensure the protection of individuals' privacy. The government and relevant authorities must take prompt measures to investigate the incident, reinforce cybersecurity measures, and provide transparent updates to affected citizens.

Source: TechCrunch