Bahrain Government Portals 15,500 Accounts Leaked on Dark Web

Oct 2024 · 15.5K accounts

By Karim El Labban · ZERO|TOLERANCE

Bahrain Government Portals: 15,500 Accounts Leaked on Dark Web

On October 26, 2024, an unidentified threat actor published a credential dump containing over 15,500 Bahraini government service portal accounts on a prominent dark web forum.

The posting was accompanied by a statement referencing "a recent controversy"--language suggesting politically motivated action rather than purely financial cybercrime. The dumped credentials consisted of usernames and passwords for citizen-facing digital government services.

01

KEY FACTS

  • .What: 15,500+ government portal credentials published on dark web forum.
  • .Who: Bahraini citizens using e-government services (~2.2% of nationals).
  • .Data Exposed: Usernames, passwords, and likely CPR national ID numbers.
  • .Outcome: No public acknowledgment or enforcement by Bahraini authorities.
02

WHAT WAS EXPOSED

  • .Usernames and passwords for 15,500+ government service portal accounts
  • .Likely exposure of CPR (Central Population Registry) numbers used as universal national identifiers
  • .Potential access to personal profiles within government portals including names, dates of birth, addresses
  • .Potential access to government correspondence, tax records, and utility payment histories
  • .Possible gateway to healthcare records accessible through government health service portals

With ~700,000 Bahraini nationals, 15,500 compromised accounts represents approximately 2.2% of the national citizen population. The PDPA has statutory authority to impose fines up to BD 20,000 per violation or BD 1,000 per day for ongoing non-compliance.

03

SOURCES

Daily Dark Web, Bahrain PDPL (Law No. 30/2018), Bahrain eGovernment Authority, Information & eGovernment Authority

RELATED ANALYSIS

Cisco Systems: ShinyHunters Claim 3M Salesforce Records, 300+ GitHub Repos, and AWS Data in Triple-Vector Extortion
Mar 31, 2026 · 3M+ records claimed · 300+ repos · April 3 deadline
Oracle's Dual Breach: 6M Cloud SSO Records Stolen, 80 Hospitals Compromised - and a Denial That Collapsed Under Evidence
Mar 21, 2025 · 6M records · 140K tenants · 80 hospitals
TriZetto/Cognizant: 3.4M Patient Records Stolen in 11-Month Healthcare Supply Chain Breach
Feb 6, 2026 · 3.4M patients · 11-month dwell · ~24 lawsuits
Infinite Campus: ShinyHunters Breach K-12 Platform Serving 11M Students via 10-Minute Vishing Attack
Mar 18, 2026 · 11M students · 3,200+ districts · 46 states
Crunchyroll: 6.8M Users Exposed After Infostealer Malware Compromises TELUS Support Agent's Okta Credentials
Mar 12, 2026 · 6.8M users · 100GB stolen · $5M ransom
MORE DATA BREACHES →