A threat actor claims to have breached Link3, a major IT solutions and internet service provider based in Bangladesh. The data has been put up for sale on a dark web forum.
According to the forum post: Link3 is the largest ISP in the country by active subscribers, offering essential services like fiber broadband and IT solutions for businesses and individuals. It plays a crucial role in Bangladesh’s digital infrastructure and is the only ISP connected to various banks in the nation.
The threat actor claims the breach occurred on July 9, 2025, and affects 189,000 unique users, encompassing both customers and employees. The compromised dataset, which is being offered to sell for $400, allegedly contains a wide range of sensitive personal and account information. The exposure of such detailed information could potentially lead to various malicious activities, including identity theft, phishing campaigns, and unauthorized account access.
The leaked data allegedly includes:
Subscription ID
Phone number
Email address
Full username
Subscription password
Full address
Subscription category and status
SMTP logs and newsletter emails
If the hacker’s claim is true, the exposure of personal information could result in identity theft, phishing attacks, financial fraud, and unauthorized access to private accounts.
Users are urged to change passwords and remain vigilant. The breach also underscores the urgent need for stronger cybersecurity measures within the telecommunications sector in Bangladesh.
(Source: Darkweb, Undercode)
(Media Disclaimer: This report is based on research conducted internally and externally using different ways. The information provided here is for reference only, and users are responsible for reffering and relying on it. Infosecbulletin is not liable for the accuracy or consequences of using this information by any means)
InfoSecBulletin Cybersecurity for mankind
