Hacking and Unauthorized Computer Access Under Bangladesh Law

Hacking refers to gaining access to a computer, network, server, or digital account without authorization or exceeding the authorization you legitimately have. Bangladesh law covers hacking under:

• Digital Security Act 2018, Section 19 (Unauthorized Access): Up to 14 years' imprisonment and BDT 1 crore fine.
• DSA Section 17 (Attacking Critical Infrastructure): Hacking power grids, financial systems, or government networks — up to 14 years.
• ICT Act 2006, Section 54: Hacking provisions (still applicable for older cases).

If your account, website, or business system has been hacked, contact a cyber law lawyer in Dhaka for guidance on filing a case and securing your systems.

DSA Section 19 covers unauthorized access to any computer, computer system, computer network, or any program, information, or data of any person. This includes:

• Logging into someone's email, social media, or bank account without permission.
• Installing malware, ransomware, or spyware on another's device.
• Intercepting communications or data transmissions without authorization.
• If the access is for committing any other offence (fraud, blackmail, espionage), the punishment escalates significantly.
• Hacking computer systems containing personal data triggers both DSA and potential data protection liability.

If you or your business has been hacked:

1. Isolate the affected system — disconnect from the network immediately to prevent further damage or data exfiltration.
2. Do not turn off the device if forensic evidence collection is being considered — a powered system preserves more evidence than one that was shut down.
3. Preserve logs — server logs, access logs, error messages are critical evidence.
4. Report to police and file an FIR under DSA Section 19. The Cyber Crime Unit can conduct technical investigations.
5. Notify affected parties — if customer or employee data was accessed, a data breach notification may be a legal or ethical obligation.
6. Engage a cyber lawyer to manage the legal response and any civil claims against the hacker.

Contact Advocate Md. Shah Alam in Uttara for hacking cases involving business systems or personal data breaches.

White hat or ethical hacking — security testing of systems you own or have been explicitly authorised to test — is not a crime. The key legal distinction is:

• Authorization: Testing with written authorization from the system owner is lawful. Without it, the same acts are criminal hacking regardless of intent.
• Scope: Even authorized testers can face liability if they exceed their agreed scope.

Companies hiring penetration testers in Bangladesh should obtain a written security testing agreement to clearly define the legal scope of the engagement.

It depends on the circumstances. If the account owner revokes consent and you continue accessing it, this can constitute unauthorized access. Regular sharing of an account is a grey area — but accessing someone's account to spy on or control them is illegal regardless of how access was obtained.

Yes. Former employees who retain or misuse system access after termination can face DSA Section 19 prosecution and civil liability for any damages caused by unauthorized access.

Bangladesh can still prosecute foreign hackers who target Bangladesh-based systems through Mutual Legal Assistance Treaties (MLATs) for international cooperation, and can pursue local assets of foreign entities operating in Bangladesh.