PAUWB Server at Risk, Sensitive Data Being Leaked

Cybersecurity researchers have raised serious concerns over a potential data breach on the server of the Bangladesh Water Development Board (PAUWB), warning that sensitive information may be exposed and exploited if immediate action is not taken.

On the night of 14 February, experts monitoring cyber threats detected unusual activity linked to the PAUWB server, including evidence of file leakage that appeared publicly accessible online.

Analysts manually verified the leaks, finding that usernames and passwords from two servers were among the exposed data. Such credentials, if misused, could allow unauthorized individuals to gain control over mobile phones or intercept communications, according to cybersecurity specialists.

Experts alerted both the Water Development Board and the Computer Incident Response Team of Bangladesh (CIRTD) about the detected vulnerabilities, recommending steps to secure the exposed files and strengthen overall cyber defenses.

However, authorities initially denied any issues, asserting that the PAUWB servers were secure and protected by existing safeguards. A senior system analyst later stated that the servers were currently in stable condition with no risk of further leakage, and additional protective measures could be implemented if directed by the government.

Despite official reassurances, cybersecurity professionals continue to warn that such incidents reflect broader weaknesses in the digital infrastructure of government agencies.

They stress that if critical data — including personal details of officials or other sensitive system information — were accessed, it could have far-reaching consequences for digital services that rely on secure data handling.

Digital safety experts also highlighted that vulnerabilities in publicly accessible systems can be exploited by malicious actors to conduct identity theft, unauthorized surveillance, or system disruptions. They urge that all government departments urgently review and strengthen their cybersecurity measures to prevent future breaches and protect public trust in digital governance initiatives.