|
|
Over 9,000 Banking Credentials Found on Dark Web
A study by TechPana has uncovered serious cybersecurity risks in Nepal’s banking sector, with more than 9,000 employee, system administrator, and customer credentials from 18 commercial banks found on the dark web. Around 600 credentials were linked to internal banking systems. The investigation found employee and IT administrator data from 16 banks, including Nabil, Rastriya Banijya, Nepal Bank, Sanima, NMB, Kumari, NIC Asia, and others. Nabil Bank, Rastriya Banijya Bank, and Nepal Bank were among the most exposed.
The analysis of 1,676 leaked credential records found 569 unique accounts, with 25.4% using very weak passwords and widespread password reuse across multiple platforms. Some credentials were linked to Microsoft 365, webmail, HR systems, core banking and e-banking platforms, payment gateways, and 11 accounts connected to Nepal Rastra Bank’s financial reporting portal.
TechPana collected publicly available data from dark web, leak platforms, and paste sites covering 2019 to June 2026, with technical support from Vizile AI Inc. The findings highlight significant weaknesses in password management, credential security, and protection of sensitive banking systems. These findings highlight serious privacy and sensitive data protection risks in Nepal’s banking sector. Exposed credentials could enable unauthorized access to personal, financial, and internal banking information, increasing risks of identity theft, fraud, and data misuse. |
|
|
Supreme Court Orders Release of Journalist Kishor Shrestha
The Supreme Court ordered the release of journalist Kishor Shrestha, directing police to continue their investigation without keeping him in custody. The Court said the circumstances did not justify detention and noted that complaints concerning news content should be addressed through Press Council Nepal, in line with the constitutional right to communication. The Court also ordered authorities to return six CPUs and two laptops seized from Shrestha’s office and residence. Shrestha was arrested on August 12 under allegations of violating the Privacy Act, 2018. Government Approves Software Development Committee
The government has approved the Software Development and Operation Committee (Formation) Order, 2026, aimed at making software development, operation and IT system management across government agencies more organized. The move comes as the government expands e-governance and digital public services, although details on the committee’s structure and responsibilities have not yet been made public. However, concerns have been raised that the arrangement could discourage Nepal’s private software sector. Proposal on Private Sector Collecting Biometric Data of Nepalis Abroad
The government has proposed amending the Passport Act to allow private entities or designated institutions to collect passport applications and biometric data of Nepali living abroad. The move aims to make passport services more accessible, particularly for citizens living far from Nepali diplomatic missions. However, lawmakers have raised concerns about the protection, misuse, storage, transfer, and accountability of sensitive biometric data. The proposed amendment does not clearly define which private entities can collect such data or the security standards they must meet. Concerns are heightened by the absence of a dedicated data protection law in Nepal. The bill has moved forward in the House of Representatives, with MPs given an opportunity to propose amendments. Comedian Reports Threats Over Political Satire
Comedian Amarendra Yadav has reported receiving threats and feeling unsafe after roasting political leaders in a recent episode of Comedy Baaj which featured UML leader Surya Bahadur Thapa and former RSP leader Mukul Dhakal as guests. The show’s director, Sundar Khanal, called for artists to be allowed to perform freely and urged audiences to treat satire as satire. The incident raises concerns about freedom of expression and the safety of comedians and content creators. NTA Seeks Feedback on New Integrated Telecom Policy
The Nepal Telecommunications Authority (NTA) has published a draft Integrated Telecommunications Policy and invited stakeholders to submit feedback within 15 days. The proposed policy aims to modernize telecom regulation, strengthen implementation, and ensure secure, reliable, affordable and accessible services while supporting Nepal’s digital transformation and socio-economic development. It is expected to replace the Telecommunications Policy 2003, Broadband Policy 2014, and ICT Promotion Policy 2015. SC Seeks Government Response on CCTV in Police Custody
The Supreme Court (SC) has issued a show-cause order to the government over a petition seeking mandatory CCTV cameras with audio-video recording in police offices, detention centres and interrogation rooms. The petition also calls for body-worn cameras from the time of arrest, preservation of footage for at least 18 months, and acceptance of recordings as digital evidence. The initiative aims to prevent torture, human rights violations and deaths in custody, while strengthening transparency and accountability in the criminal justice system. NTA Orders ISPs to Block Illegal Online Platforms
The Nepal Telecommunications Authority (NTA) has again directed internet and mobile service providers to immediately block websites and apps linked to online betting, cryptocurrency, child sexual content, and pornography. The NTA warned that providers failing to comply could face legal action under the Telecommunications Act and other applicable laws. The directive follows repeated concerns that such platforms remain accessible despite earlier blocking orders. |
|
Digital Rights & Safety Bootcamp 2026
From 13–16 August 2026, 35 young changemakers came together for the Digital Rights & Safety Bootcamp 2026, a four-day, hands-on learning programme focused on building safer, freer, and more inclusive digital spaces. The bootcamp brought together Gen Z activists, young journalists, content creators, and youth human rights defenders and was organized by Advocacy Forum Nepal, Digital Rights Nepal, and Intergenerational Civic Forum, with support from International Media Support (IMS).
Through interactive discussions, threat-mapping exercises, debates, games, practical digital safety sessions, and content creation activities, participants explored key issues including digital rights, freedom of expression, online safety, cybersecurity, and collective protection. The programme created a space for young people to question, connect, collaborate, and build solidarity. Participants gained practical knowledge and tools to better understand digital risks, strengthen their digital safety practices, and engage more confidently in digital spaces.
The bootcamp also emphasized the importance of collective action in protecting rights online and encouraged participants to translate their learning into meaningful action within their communities. As digital spaces continue to shape civic participation and public discourse, empowering young people with the knowledge and tools to navigate them safely and responsibly remains essential. |
|
|
Disclaimer: Digital Rights Weekly is a weekly publication that curates and analyses news and developments on digital rights and ICT issues, primarily based on media monitoring and publicly available sources. The inclusion of any report or reference does not necessarily reflect the views or positions of Digital Rights Nepal (DRN), unless mentioned explicitly otherwise. AI assistance may have been used solely to improve language, grammar, and readability. Digital Rights Nepal (DRN) is a not-for-profit initiative dedicated to promoting and protecting digital rights in Nepal, including freedom of expression and association online, privacy, access to information, internet governance, AI governance, and cyber laws, policies, and security. |
|
|
| |
|
