Thailand Investigates Sale of 36 Million Personal Data Records

Vietnam.Vn

Thailand Investigates Sale of 36 Million Personal Data Records

First seen 14 Jun 2026, 19:35 UTC • •51.9

Article Content

1 / 4

Browse articles

ThreatCluster •June 15, 2026 at 19:09 UTC

•Over 36 million personal records of Thai citizens are reportedly for sale online.
•The authenticity of the data is still being verified by Thai authorities.
•Legal penalties for data trafficking could include fines and imprisonment.

Thai authorities are investigating claims that over 36 million personal records of citizens are being sold online. Deputy Minister Boonthida Somchai has directed the Office of the Personal Data Protection Committee to collaborate with the National Cyber Security Agency (NCSA) to verify the data's authenticity and ascertain if a breach occurred. The NCSA has identified the original source of the data sale on the dark web and is conducting technical tests to analyze the dataset. Currently, there is no evidence confirming the data's authenticity or linking it to any specific government agency. If a breach is confirmed, legal actions will be taken against those involved in the sale or distribution of the data. The ministry has urged agencies holding citizen data to adhere to high standards of data protection. The investigation is ongoing, with authorities working to maintain public confidence.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 97d ago How this analysis works

Timeline

2026-06-13

Investigation launched into data sale claims

Thai authorities began investigating reports of 36 million personal records being sold online, with verification efforts underway.

2026-06-14

Authorities continue data authenticity checks

The NCSA is gathering samples to determine if the data is newly leaked or from previous breaches, with no evidence of authenticity confirmed yet.

More articles in this cluster (3)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Data Breach
T1567 - Exfiltration Over Web Service

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Data Breach related to CWE-200 - Exposure of Sensitive Information
Data Breach related to T1567 - Exfiltration Over Web Service

Continue Reading

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…