Pathao says cyberattack exposed user information in Bangladesh

Pathao says attackers obtained users’ names, email addresses, and phone numbers during an Oct. 4 cybersecurity incident that disrupted its ride-hailing and delivery services in Bangladesh.

In an Oct. 7 statement, the company said it took critical systems offline after detecting the incident and restored services shortly afterward. Some users could still experience intermittent problems while stabilization work continues.

Pathao said it engaged external cybersecurity experts, introduced containment measures, and informed relevant authorities. It did not disclose how many users were affected or how attackers accessed its systems.

The company has not publicly confirmed whether passwords, payment information, or identification documents were affected. It urged users to be cautious about unsolicited messages, calls, or links claiming to represent Pathao, and to rely on official channels for verified updates.