Thailand Proposes Mandatory MFA Amid 60M Credential Leak

• •Thailand seeks to enforce mandatory MFA due to 60 million leaked credentials.
• •The leaks affected at least 20 state agencies and were caused by compromised credentials from the dark web.
• •Immediate actions include password resets and compliance with the Personal Data Protection Act.

Thailand's Digital Economy and Society Ministry is seeking Cabinet approval for mandatory multi-factor authentication (MFA) after 60 million credential records were leaked on dark-web markets. The leaked records, which may include duplicates and old accounts, have raised alarms about the security of sensitive information across at least 20 state agencies. Minister Chaichanok Chidchob stated that the leaks were not due to direct cyberattacks but rather the purchase of compromised credentials. The government plans to enforce compliance with the Personal Data Protection Act (PDPA) and reset passwords for affected systems. Immediate actions include encouraging citizens to change passwords and removing dormant accounts. The ministry is also coordinating with the National Cyber Security Agency to enhance cybersecurity measures.