Back Facebook

A dark-web thre@t actor has claimed to hold data linked to nearly 1.9 crore Pathao users ...

Facebook • October 9, 2026

A dark-web thre@t actor has claimed to hold data linked to nearly 1.9 crore Pathao users, including phone numbers, email addresses, NID details, and other personal information. The alleged 133GB dataset reportedly contains records of 19,063,918 accounts. The actor has demanded $400,000 and thre@tened to publish the data if the demand is not met. Pathao has acknowledged the cybersecurity incident and said it is cooperating with authorities.

"Most relevant" is selected, so some may have been filtered out.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Pathao Faces Data Extortion Threat with 19M User Records Allegedly Compromised A dark web threat actor has claimed to possess a dataset of approximately 133GB containing personal information of nearly 19 million users of Pathao, a Bangladeshi ride-hailing and fintech platform. The dataset reportedly includes emails, phone numbers, national ID details, and other sensitive information. The attacker has demanded a ransom of $400,000, threatening to release the data if the payment is not made. Pathao has acknowledged the incident and is cooperating with authorities, though the company has not confirmed the breach. The claims made by the threat actor have not been independently verified, and users are advised to be cautious of potential phishing attempts. The situation poses significant risks for identity fraud and SIM-swapping in Bangladesh if the claims are substantiated. 4 sources 53

Extracted Entities

A dark-web thre@t actor has claimed to hold data linked to nearly 1.9 crore Pathao users ...

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)