In June and July 2023, a Bangladesh government website exposed personal information belonging to more than 50 million citizens. The exposed records reportedly included names, addresses, phone numbers, and national identification numbers. The vulnerability was discovered on July 7, 2023, by Viktor Markopoulos, a researcher at Bitcrack Cyber Security, and reported by TechCrunch. The incident was attributed not to a deliberate hack but to weaknesses in the website’s infrastructure and data-protection practices.
The affected service was identified as the Office of the Registrar General’s Birth and Death Registration website. Zunaid Ahmed Palak, Bangladesh’s state minister for Information and Communication Technology, acknowledged the security failure and said vulnerabilities had enabled unauthorized access. The government announced on July 10 that it had taken down the exposed data and temporarily shut affected websites while investigating and attempting to improve security. From October 2023, leaked national-identification data were reportedly available through Telegram channels, raising risks of identity theft and fraud and prompting criticism over inadequate security audits and protection of citizens’ sensitive records.