Breaches and incidents
Pathao (Bangladesh): critical systems taken offline, user names, emails and phone numbers obtained
Pathao said services were disrupted on Sunday 4 Oct because it took “critical systems offline immediately upon detecting a cybersecurity incident,” and...
- Disclosed
- Verification
- Checked against a primary source
What happened
- Pathao said services were disrupted on Sunday 4 Oct because it took “critical systems offline immediately upon detecting a cybersecurity incident,” and that “certain personal information, including names, email addresses and phone numbers, was obtained by malicious actors.”
- Root cause: not disclosed.
- No attacker named.
- Pathao took containment measures, engaged external experts, informed authorities and restored services; the number of affected users was not stated and the investigation is ongoing.