BDJobs Today Data Breach: 24,950 Bangladeshi Job Platform Records Exposed

BDJobs Today Breach: 24,950 Bangladeshi Job Seekers' Records Exposed in Plaintext

BDJobs Today was a Bangladeshi employment platform connecting job seekers with employers across Bangladesh's growing digital economy. The platform operated in Bengali and served a significant portion of the country's professional job market. On August 21, 2018, BDJobs Today's database of 24,950 user records was extracted and leaked as part of the August 21 coordinated multi-platform disclosure event. The breach exposed job seeker credentials stored in plaintext -- a catastrophic security failure with particularly serious implications for the professinal identity and career data of Bangladeshi workers.

BDJobs Today (August 2018): Breach Summary

• Records Exposed: 24,950
• Data Types: Email addresses, usernames, passwords
• Breach Type: Database breach
• Password Type: Plaintext -- passwords stored without any hashing or protection. Directly readable from the database.
• Country: Bangladesh
• Date Leaked: August 21, 2018

Job Platform Breaches: Professional Identity at Risk

Employment platforms hold a uniquely sensitive category of user data. Job seekers who register on BDJobs Today typically provide professional email addresses, employment history signals, and career-related personal information -- a profile that extends beyond simple account credentials. The email addresses exposed in this breach are likely tied to corporate accounts, LinkedIn profiles, and other professional identity platforms where credential reuse creates a direct bridge between the BDJobs Today breach and an attacker's ability to impersonate job seekers, intercept recruitment communications, or access employer-facing platforms. For Bangladeshi professionals, whose carrer data may be concentrated on fewer platforms than their counterparts in larger digital economies, this breach represents a significant professional identity risk.

South Asian Employment Platform Security Gap

The decision to store passwords in plaintext -- a practise abandoned by responsible developers long before 2018 -- reflects a security investment gap that affected many employment platforms in rapidly digitizing economies. Bangladesh's job market was undergoing significant online transition in the mid-2010s, with platforms like BDJobs Today capturing a growing share of recruitment activity. The security infrastructure of these platforms often lagged behind their growth, leaving large databases of professional credentials protected by nothing more than the assumption that the database itself wouldn't be accessed. The August 2018 breach proved that assumption wrong for 24,950 users.

The August 21, 2018 Cluster

BDJobs Today appeared in the August 21, 2018 leak cluster alongside multiple other platforms from different countries. The pattern of simultaneous disclosure across unrelated platforms from different geographies indicates coordinated aggregation -- a threat actor or service that compiled databases from multiple sources and released them together. BDJobs Today users should assume their exposed credentails were cross-referenced against other databases in this cluster, enabling attackers to build richer profiles combining professional identity signals with other leaked personal data.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion exposed records, including South Asian employment platform breaches and the full August 2018 leak series. If you used BDJobs Today to search for employment opportunities in Bangladesh, your plaintext password was readable the moment this database was accessed. Run a free scan now and find out what data attackers may already have.