Bangladesh data breaches: 68 incidents reported since 2023

A report by the TechGlobal Institute (TGI) titled ‘Breached and Unanswered: Bangladesh’s Data Breach Epidemic (2023–2026)’ has documented at least 68 data breaches in Bangladesh between January 2023 and May 2026. The incidents involved 36 government entities and 32 private organizations, affecting sensitive citizen data such as national IDs, passports, call records, and bank accounts.

According to TGI, the highest frequency of breaches occurred within government utility service providers, accounting for 20 incidents, followed by 16 breaches in private companies and business groups. Other affected sectors include the Election Commission, telecommunications, the armed forces, and private banks.

Dr. Md. Tayebur Rahman, Director General of the National Cyber Security Agency, attributed these vulnerabilities to insufficient budget allocations for IT infrastructure, a lack of skilled manpower, and the difficulty of patching outdated systems against rapidly evolving threats. While total immunity is impossible, he noted that risks can be mitigated through data encryption, regular IT audits, and cyber drills.

Minister of Posts, Telecommunications, and Information Technology, Fakir Mahbub Anam, stated that authorities are investigating recent reports, including an advertisement on a dark web forum by a hacker group named ‘Madarks’ attempting to sell the CVs of 6 million Bangladeshi job seekers.