Hacker Group Claims Data Breach of 6 Million BDJobs User Profiles on Dark Web
Photo Collected
A hacker group identifying itself as MadRax has advertised the personal data of six million Bangladeshi job seekers for sale on the dark web, claiming the information was sourced from the recruitment platform Bdjobs. The company has categorically denied the allegations of a security breach.
The threat actor published the advertisement on a dark web forum on Sunday, asserting that the database contains comprehensive profiles of six million candidates. According to the post, the stolen data includes names, phone numbers, residential addresses, email addresses, educational qualifications, employment histories, and training certifications. The group is offering a copy of the database for $1,000, with a limited availability of five copies, and has requested payments via digital platforms such as Paytm, Wise, PayU, and Binance.
To substantiate their claims, the hackers released 148 sample resumes. An analysis of these samples reveals that the majority of the data appears to be outdated, with most records last updated between 2011 and 2017. Several individuals identified in the samples confirmed to local media that they had uploaded their resumes to the Bdjobs platform several years ago.
Cybersecurity experts have expressed grave concerns regarding the potential fallout of such a massive data exposure. Tanvir Hassan Zoha, a technology expert and prosecutor at the International Crimes Tribunal, warned that the aggregation of personal identifiers allows criminals to construct complete digital profiles of victims. Such information is often leveraged for targeted phishing campaigns, fraudulent job offers, identity theft, and sophisticated financial scams.
Bdjobs founder and Chief Executive Officer Fahim Mashroor has refuted claims of a systemic leak. He stated that the platform maintains stringent security protocols to protect user data and provides users with granular controls over who can view their profiles.
Mashroor noted that while the platform hosts thousands of registered recruiters who are authorized to access applicant information for hiring purposes, the data is strictly for their internal recruitment use. He emphasized that if any hiring entity is found to be distributing or selling data to third parties, Bdjobs will pursue legal action against the offending organization.
0%
0%
0%
0%
