According to The Business Standard, citing a statement from Pathao, a cybersecurity incident on October 4, 2026 disrupted platform services and allowed malicious actors to obtain certain user information [1]. The company stated that names, email addresses, and phone numbers were involved, without disclosing the number of affected users or the attack vector [1]. Pathao preventively shut down critical systems before restoring services and engaging external cybersecurity experts, and reminded users never to share passwords or verification codes with impersonators [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Oct 9, 2026 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
Pathao Confirms Cyberattack Exposed Partial User Contact Information
1 min read
- Disclosed
- Oct 9, 2026
- Occurred
- Oct 4, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Transportation & logistics
What to do nowOur advice
Pathao preventively shut down critical systems before restoring services and engaging external cybersecurity experts, and reminded users never to share passwords or verification codes with impersonators [1]
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
Pathao preventively shut down critical systems before restoring services and engaging external cybersecurity experts, and reminded users never to share passwords or verification codes with impersonators [1].
Source excerpt: "Pathao, one of Bangladesh's largest ride-hailing and delivery platforms, has said malicious actors obtained some users' personal information following a cybersecurity incident that disrupted services across its platform on 4 October." [1].
References
Media1
- [1]
“Pathao, one of Bangladesh's largest ride-hailing and delivery platforms, has said malicious actors obtained some users' personal information following a cybersecurity incident that disrupted services across its platform on 4 October.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.