A recent investigation reveals sensitive and private citizen data is being sold online in Bangladesh. This includes call detail records (CDRs), mobile phone location data (“line location”), national identification (NID) information, SMS lists, passport details, and Tax Identification Numbers (TINs). The data is advertised on social media platforms and through various websites, as well as messaging apps like Telegram and WhatsApp. The investigation, conducted by DismissLab, details how individuals can readily obtain this information for a price. This widespread availability of personal data raises serious concerns about privacy and potential misuse. Authorities have yet to comment on the breach or how they plan to address the illegal sale of sensitive information. The incident highlights a critical vulnerability in data security within the country.