Data belonging to more than 1.8 million users in Bangladesh, along with at least 17,362 sets of login credentials, have been found on the dark web, according to a report by CyberStation, the cybersecurity division of Brain Station 23 PLC.
The findings were presented at an event titled “Bangladesh Cyber Resilience Briefing 2026” held at Brac Centre on Thursday.
Around 150 representatives from the government, banking, telecommunications, technology and education sectors attended the event, along with representatives of regulatory bodies and cybersecurity experts.
According to a press release, CyberStation reviewed 767 domains across 15 sectors and found evidence of personal data exposure in almost all of them.
The report found that the government services sector accounted for the largest share of exposed citizens’ data, while the technology and telecommunications sectors had the highest rates of data exposure.
CyberStation said the figures were minimum estimates and that the actual numbers could be higher.
Speaking at the event, Mohibbullah Moktadir Tanim, head of cybersecurity services at CyberStation, said: “We cannot mitigate risks that we cannot see.”
He said identifying what data had been exposed would allow the necessary steps to be taken before criminals could misuse it.
Brain Station 23 Executive Director M J Ferdous stressed the need to reduce reliance on foreign software to strengthen the country’s cybersecurity infrastructure.
Cybersecurity analyst Tanvir Hasan Zoha, meanwhile, emphasised the importance of raising public awareness and developing effective preventive strategies.
A panel discussion at the event focused on the risks of data exposure on the dark web and ways to address them. Participants highlighted the need for coordinated efforts among relevant stakeholders to prevent the misuse of personal information.