A threat actor claims to have breached Link3, a major IT solutions and internet service provider based in Bangladesh. The data has been put up for sale on a dark web forum.
According to the forum post: Link3 is the largest ISP in the country by active subscribers, offering essential services like fiber broadband and IT solutions for businesses and individuals. It plays a crucial role in Bangladesh’s digital infrastructure and is the only ISP connected to various banks in the nation.
By infosecbulletin
/ Tuesday , September 29 2026
Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been...
Read More
By infosecbulletin
/ Tuesday , September 29 2026
The JadePuffer ransomware group is attacking Azure users with agent-based attacks that gather information, steal passwords, and damage key components. The...
Read More
By infosecbulletin
/ Tuesday , September 29 2026
The 5th Edition of InfoSecCon-2026, a premier cybersecurity-focused event, has been successfully completed with the participation of cybersecurity professionals, technology...
Read More
By infosecbulletin
/ Saturday , September 19 2026
Microsoft has fixed a serious security flaw in Azure AI Foundry that could let bad actors gain privilege escalation. The...
Read More
By infosecbulletin
/ Friday , September 18 2026
Amazon Web Services cannot restore access to its cloud-computing facility in Bahrain and one of three data-hosting zones in the...
Read More
By infosecbulletin
/ Friday , September 18 2026
A threat actor is allegedly offering a private remote code execution exploit for Fortinet FortiGate SSL VPN appliances, claiming that...
Read More
By infosecbulletin
/ Thursday , September 17 2026
Anthropic is making a new Claude feature called “Money.” It's a separate tab in the mobile app. The new interface...
Read More
By infosecbulletin
/ Thursday , September 17 2026
GhostCode is a new phishing kit that changes a regular Microsoft 365 sign-in into an account theft. It doesn't need...
Read More
By infosecbulletin
/ Tuesday , September 15 2026
CISA has added a serious Cisco Secure Email Gateway flaw to its list of known exploits. They warn that attackers...
Read More
By infosecbulletin
/ Tuesday , September 15 2026
Japan’s Digital Agency found a data leak that may have exposed about 246,000 records with personal information of government workers....
Read More
The threat actor claims the breach occurred on July 9, 2025, and affects 189,000 unique users, encompassing both customers and employees. The compromised dataset, which is being offered to sell for $400, allegedly contains a wide range of sensitive personal and account information. The exposure of such detailed information could potentially lead to various malicious activities, including identity theft, phishing campaigns, and unauthorized account access.
The leaked data allegedly includes:
Subscription ID
Phone number
Email address
Full username
Subscription password
Full address
Subscription category and status
SMTP logs and newsletter emails
If the hacker’s claim is true, the exposure of personal information could result in identity theft, phishing attacks, financial fraud, and unauthorized access to private accounts.
Users are urged to change passwords and remain vigilant. The breach also underscores the urgent need for stronger cybersecurity measures within the telecommunications sector in Bangladesh.
(Source: Darkweb, Undercode)
(Media Disclaimer: This report is based on research conducted internally and externally using different ways. The information provided here is for reference only, and users are responsible for reffering and relying on it. Infosecbulletin is not liable for the accuracy or consequences of using this information by any means)