Bangladesh Ministry Database Leak

Data Breach Summary

On May 15, 2025, a SQL database from the Ministry of Road Transport and Bridges of Bangladesh was leaked on the dark web forum darkforums.st by user “wht”. The data appears to originate from the government portal eservices.rthd.gov.bd and contains official legal and administrative records.

The format of the leak is structured SQL, suggesting a direct database export.

---

Where and How?

The database was published on darkforums.st in .sql format. The extracted tables include detailed records in Bengali, primarily related to government activities, legal processes, and official case follow-ups.

The structure of the SQL code and the presence of INSERT INTO statements show that the dump is ready to be restored, enabling direct access to structured governmental data.

Contains:

• Official case summaries and legal correspondence
• Dates, case references, and court-related memos
• Government legal workflow logs
• Bengali-language notes, memos, and directives from public officials

Breach History

There have been prior cyber incidents targeting Bangladeshi government sites, but there is no confirmed previous breach publicly attributed to eservices.rthd.gov.bd. This incident reveals critical weaknesses in database security or endpoint exposure that allowed this SQL export to be leaked.

---

Further Action

The Ministry should take the following steps urgently:

• Investigate the breach source and determine how the database was exfiltrated
• Restrict public access to database interfaces
• Audit user and system access logs
• Notify cybersecurity and judicial authorities to mitigate ongoing risks

Immediate Recommendations

Authorities and impacted institutions should urgently:

• Identify the source system or leak vector.
• Notify affected individuals and consider providing identity protection services.
• Strengthen data access controls and encryption policies.
• Audit current systems for additional vulnerabilities.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.