\n<\/p>\n
Two senior officials working for anti-terror police in Bangladesh allegedly collected and sold classified and personal information of citizens to criminals on Telegram, TechCrunch has learned.\u00a0<\/p>\n
The data allegedly sold included national identity details of citizens, cell phone call records and other \u201cclassified secret information,\u201d according to a letter signed by a senior Bangladeshi intelligence official, seen by TechCrunch.<\/p>\n
The letter, dated April 28, was written by Brigadier General Mohammad Baker, who serves as a director of Bangladesh\u2019s National Telecommunications Monitoring Center, or NTMC, the country\u2019s electronic eavesdropping agency. Baker confirmed the legitimacy of the letter and its contents in an interview with TechCrunch.\u00a0<\/p>\n
\u201cDepartmental investigation is ongoing for both the cases,\u201d Baker said in an online chat, adding that the Bangladeshi Ministry of Home Affairs ordered the affected police organizations to take \u201cnecessary action against those officers.\u201d\u00a0<\/p>\n
The letter, which was originally written in Bengali and addressed to the senior secretary of the Ministry of Home Affairs Public Security Division, alleges the two police agents accessed and passed \u201cextremely sensitive information\u201d of private citizens on Telegram in exchange for money.<\/p>\n
According to the letter, the police agents were caught after investigators analyzed logs of the NTMC\u2019s systems and how often the two accessed it.<\/p>\n
The letter reveals the identity of the officials. One of the accused is a police superintendent serving with the Anti-Terrorism Unit (ATU). The other is an assistant police superintendent deputy at the Rapid Action Battalion, also known as RAB 6, a controversial paramilitary unit<\/a> that the U.S. government sanctioned in 2021<\/a> over allegations that the unit is linked to hundreds of disappearances and extrajudicial killings. TechCrunch is not naming the two people who were accused as it\u2019s unclear if they have been charged under the country\u2019s legal system.<\/p>\n The NTMC is a government intelligence agency established under Bangladesh\u2019s Ministry of Home Affairs. The agency\u2019s core task is to monitor all telecommunications traffic and intercept phone and web communications to detect and prevent threats to national security.\u00a0<\/p>\n Organizations like Human Rights Watch<\/a> and Freedom House<\/a> have criticized the NTMC for lacking safeguards against abuses, both against free speech as well as privacy. Over the years, NTMC procured sophisticated technology from companies in Israel<\/a>, which Bangladesh does not officially recognize, as well as other Western countries<\/a>, to conduct mass surveillance largely on opposition party members, journalists, civil society members and activists.\u00a0\u00a0<\/p>\n As part of its mission, the NTMC runs the National Intelligence Platform, or NIP, an internal government web portal that holds classified citizen information, like national identification details, cell phone registration and cell data records, criminal profiles and other information.\u00a0<\/p>\n Various law enforcement and intelligence agencies have user accounts on the NIP portal provided by the NTMC.\u00a0<\/p>\n NTMC\u2019s own investigation concluded that the agents used the NIP platform more frequently than others, and accessed and collected information that was not relevant to them.<\/p>\n \u201cConsidering the context, such irrelevant access and unlawful handover of extremely sensitive classified data should be investigated to identify everyone involved in this and we also request for appropriate action against all those identified\/involved,\u201d the letter read.\u00a0\u00a0<\/p>\n Baker told TechCrunch that there were a \u201cnumber of Telegram channels,\u201d adding that one of them was called BD CYBER GANG.<\/p>\n TechCrunch could not identify the specific channel on Telegram.\u00a0<\/p>\n \t\tDo you have more information about this incident, or similar incidents? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram, Keybase and Wire @lorenzofb, or email<\/a>.<\/a> You can also reach out to Zulkarnain Saer Khan on Signal at +36707723819, or on X @ZulkarnainSaer<\/a>. You also can contact TechCrunch via SecureDrop<\/a>.\t<\/div>\n Baker told TechCrunch that it appears that the two agents sent the information to the administrator of at least one Telegram group, who then attempted to sell it.\u00a0<\/p>\n Baker said that the two agents have been notified of the investigation.\u00a0<\/p>\n Because of the investigation, all NIP users from ATU and RAB 6 have had their access suspended \u201cuntil the involved officials are identified, and proper action is taken,\u201d according to the letter.<\/p>\n Baker confirmed the suspended access, saying that if agents \u201cneed any information for investigation purposes they can collect through Police and RAB HQ.\u201d<\/p>\n Spokespeople for Bangladesh\u2019s Ministry of Home Affairs and ATU did not respond to multiple requests for comment. A person identifying only as an \u201coperations officer\u201d at RAB 6 told TechCrunch that the agency had no comment.\u00a0<\/p>\n Last year, a security researcher found that the NTMC was leaking people\u2019s personal information on an unsecured server. The leaked data included<\/a> real-world names, phone numbers, email addresses, locations and exam results, according to Wired. Another Bangladeshi government agency, the Office of the Registrar General, Birth & Death Registration<\/a>, also leaked citizens\u2019 sensitive data<\/a> last year, as TechCrunch reported at the time.<\/p>\n In both cases, the leaks were found by Viktor Markopoulos, a researcher who works at Bitcrack Cyber Security.\u00a0<\/p>\n While those were significant cases of data exposure, this incident allegedly involving the ATU and RAB 6 agents is potentially more damaging, given that the agents allegedly sold information online in an attempt to profit from their privileged access to classified personal information.\u00a0\u00a0<\/p>\n Although the incident is under investigation, a well-placed source within the government told TechCrunch that there are still officials who are offering to sell citizens\u2019 data.<\/p>\n<\/div>\nContact Us<\/h4>\n