Cox’s Bazar Police Bangladesh Breach: 76 Officers’ Data Leaked

HEROIC's DarkHive intelligence system discovered the Cox's Bazar Police Bangladesh data breach, exposing 76 records. The breach occured in November 2022 and targeted the official portal for the Cox's Bazar District Police in Bangladesh. Compromised data included email addresses, usernames, phone numbers, and bcrypt hashed passwords belonging to law enforcement personnel.

Why This Is Dangerous

When law enforcement credentials are exposed, the risks extend far beyond typical account takeover scenarios. Attackers who obtain police usernames, phone numbers, and email addresses can use this information to impersonate officers, conduct targeted social engineering, and attempt to access sensitive government systems. Even though bcrypt hashes are more resistant to cracking than older algorithms, phone numbers and usernames provide valuable intelligence for follow-on attacks against individuals and their families.

What Was Exposed

• Email Address
• Phone Number
• Password Hash
• Username

Why This Matters

Government and law enforcement data breaches carry unique risks because the exposed individuals often have access to sensitive investigative systems and confidential records. Attackers can use leaked phone numbers and usernames to conduct SIM swapping attacks, bypassing two-factor authentication. Identity fraud targeting law enforcement personnel can also be used to interfere with ongoing investigations or compromise informants. Organizations operating government portals must prioritize security audits and implement multi-factor authentication to protect thier staff credentials.

How Database Breach Works

Government websites are frequent targets for hackers who view them as high-value targets with public credibility. Breaches often occur through unpatched content management systems, weak admin passwords, or SQL injection vulnerabilites in custom web applications. Once an attacker gains access to the database, they extract all stored user records including hashed passwords and contact details. This type of breach is particularly concerning because goverment portals often store the real identities and contact information of officials rather than anonymous usernames.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Cox's Bazar Police Bangladesh. Visit heroic.com to scan your email address and find out if your information was exposed.