CyberStation assessment finds 17,362 sets of login credentials circulating online across 15 sectors
DHAKA, October 16, 2026 — More than 1.8 million user records and at least 17,362 sets of login credentials linked to Bangladesh have been found circulating online, highlighting the country’s growing exposure to cyber risks, according to a cybersecurity assessment presented by CyberStation.
The assessment covered 767 domains across 15 sectors, with government services accounting for the largest share of exposed citizen records, while the technology and telecommunications sectors recorded the highest rates of exposure.
CyberStation, the cybersecurity division of Brain Station 23 PLC, disclosed the findings at the Bangladesh Cyber Resilience Briefing 2026, held at BRAC Centre Inn in Dhaka’s Mohakhali area on Thursday night.
Organised as part of Cybersecurity Awareness Month, the seminar brought together around 150 senior representatives from banking, telecommunications, technology, government and education, alongside regulatory officials and cybersecurity professionals.
CyberStation said the figures represented conservative minimum estimates, warning that the actual scale of exposure could be higher.
“We cannot address risks that we cannot see. Our goal is to help organisations understand what information has been exposed and act before cybercriminals can misuse it,” said Muhibbul Muktadir Tanim, head of cybersecurity services at CyberStation.
The findings underscore the potential risks associated with exposed personal information and login credentials, which can be exploited for account compromise, identity theft and other cybercrime.
MJ Ferdous, executive director of Brain Station 23, said CyberStation was built on the company's two decades of software development experience.
The event provided an opportunity to assess Bangladesh's cybersecurity position and identify the initiatives needed to strengthen its defences, he said.
“We must reduce our dependence on foreign software and strengthen the country's own cyber capabilities,” Ferdous said, adding that the company wanted to support broader efforts to improve national cybersecurity.
Cybersecurity expert Tanvir Hassan Zoha said CyberStation was contributing to the sector through its work on raising awareness and developing preventive and response strategies.
Having used the company's technology, he said its initiatives could help organisations better understand cyber risks and improve their preparedness.
Technology entrepreneur Munir Hasan also called for greater support for homegrown technology initiatives, particularly DarkWatch, a dark web monitoring platform developed by Brain Station 23.
He said collaboration to develop local platforms such as DarkWatch could contribute to strengthening Bangladesh's cybersecurity capacity.
A panel discussion on Bangladesh's dark web exposure and ways to mitigate associated risks was also held during the seminar.
The panel included Professor Mohammad Shahriar Rahman, consultant to the University Grants Commission; Mohammad Shamsul Haque, head of the Special Response Unit of Dhaka Metropolitan Police; Md Imran Khan, joint secretary (ICT) at Bangladesh Bank; and technology specialist Mahtab Uddin Ahmed.
The discussion highlighted the need for coordinated action to prevent the misuse of exposed information and strengthen the country's response to cybersecurity threats.
Representatives from universities, financial institutions and technology companies also attended the event, reflecting the cross-sectoral nature of the challenge.
Among them were Hamida Kazi, chairperson of the Department of Computer Science at BRAC University; Dr Abul Kalam Azad, chairperson of the Department of Computer Science at Jahangirnagar University; Dr Mohammad Jahidur Rahman, a professor at the same department; and Dr Rajesh Palit, director of cybersecurity at North South University.
Other attendees included A K M Sajjad Hossain, additional managing director of Grameen Bank; Dr Md Lutfor Rahman, adjunct faculty member at BRAC University and former chief information officer of Grameenphone; Shafqat Mahmud Fahmi, chief technology officer of Mobil; and Colonel Md Sohel Rana, PSC (Retd.), managing director of Stream Connect.
CyberStation said it would continue raising cybersecurity awareness among organisations and citizens while providing services to help identify exposures and take timely action.
The findings highlight the importance of regular security assessments, effective credential management and cooperation among public and private institutions to reduce the risk of exposed information being exploited.
The assessment figures were presented by CyberStation; the methodology and the extent to which the identified records represent unique individuals were not detailed in the information provided.
