[LEAK #2] Pathao (Bangladesh) — Q1 2026 production data
by RedMLMON - Thursday October 15, 2026 at 06:51 PM
#1
Look, there are suspected or actual Pathao employees and their lackeys on this channel.

First of all, fuck you guys - you're a bunch of useless idiots who have no value except for scamming your users every day. Second, you're lazy as fuck and good for nothing, only good at squeezing the life out of your riders.

So we've decided to give you a week to sort out all the shit going on in your company. If we don't see any progress after a week, we're gonna release all the data publicly - just for fun.

And lastly, we're gonna keep leaking data, fuck you guys https://t.me/pathaonews

=======================

Last week we dropped 2.48M user social profiles. You ignored us. Fine.

Today: everything that happened inside Pathao's production databases during January - March 2026. Not old backups. Live production rows, dumped 2026-10-01, covering the first quarter of THIS year.

50 tables, 8,224,449 rows, all timestamped 2026-01-01 through 2026-03-31, delivered as a single SQLite database.

Highlights:

- users_full: 462,334 NEW user registrations in Q1 2026 — phone number, email, name, full schema (86 columns incl. NID, parents_name, parents_number, blood_group, last_login, geolocation)
- pathao_api__driver_login_query_log: 1,529,015 rows — every driver login query, with internal DB account names and internal IPs ([email protected] — yes, your internal network layout is in there too)
- pathao_rides_api__otp: 8,918 rows — phone number + OTP verification codes in PLAINTEXT, plus PASETO session tokens
- pathao_rides_api__wallet_pay_transaction_logs: 483,646 rows — wallet payment flows for Q1
- pathao_rides_api__pairing_code: 158,602 rows — phone + pairing codes
- payment_aggregator: pay_direct_debits, pre_auths, pre_auth_tokens — 142K+ rows of payment pre-authorization records
- pathao_ratings__ratings: 225,971 fresh ratings
- promo_code_usage: 1,361,494 rows — every promo redeemed, with user IDs
- ride_end_deviations: 768,077 rows — where riders actually went vs. where they claimed to go
- driver onboardings, driver jobs, cooldown records, loyalty logs, business transactions, companies, admins... all 50 tables in the pack

Sample rows (real, untouched):

Driver login queries (internal account + internal IP + driver_id + timestamp):
27737049|[email protected]|16361528|1|2026-01-01 00:00:21
27737050|[email protected]|11697322|1|2026-01-01 00:00:44

Q1 2026 new registrations (id|name|email|phone|created_at):
18088245|sarda|[email protected]|9845476486|2026-01-01 00:03:01
18088246|Kopila Rai|[email protected]|9713095315|2026-01-01 00:03:19
18088247|eakra|[email protected]|01931951528|2026-01-01 00:04:54

OTP codes, plaintext (id|user_id|role|country_code|phone|otp_code):
21479|15054055|user|880|01602433989|471009
21480|18088309|user|880|01329538970|(empty — look it up in the dump)

Download:
q1_2026.db.zst — 358 MB, unpacks to 2.3 GB SQLite (50 tables, ready to query)
https://gofile.io/d/EzFn2NFF
MD5: a91643ac740edb40702321a32d0065cf

Previous drop (still up):
user_social_profiles — 2.48M rows, Facebook/Apple linked accounts
https://gofile.io/d/8sKedCGZ

Extract with: zstd -d q1_2026.db.zst, then open with any SQLite browser.

This is Q1 only.

One week. Clock's ticking. https://t.me/pathaonews
Reply


Forum Jump:


 Users browsing this thread: 1 Guest(s)