Database containing personal info of 106 million international visitors to Thailand was exposed online

[webfact]

A redacted sample of the exposed database.

 

An unsecured database containing international travel records dating back 10 years was left exposed on the web

 

PAUL BISCHOFF TECH WRITER, PRIVACY ADVOCATE AND VPN EXPERT

    

The personal details of more than 106 million international travelers to Thailand were exposed on the web without a password, Comparitech researchers report. The database included full names, passport numbers, arrival dates, and more.

 

Bob Diachenko, who leads Comparitech’s cybersecurity research, discovered the database on August 22, 2021 and immediately alerted the Thai authorities, who acknowledged the incident and secured the data the following day.

 

Diachenko surmises that any foreigner who traveled to Thailand in the last decade might have had their information exposed in the incident. He even confirmed the database contained his own name and entries to Thailand.

 

Full story: https://www.comparitech.com/blog/information-security/thai-traveler-data-leak/

 

-- © Copyright  comparitech 2021-09-21

 

- Whatever you're going through, the Samaritans are here for you

- Follow ASEAN NOW on LINE for breaking COVID-19 updates

[2long]

Thailand: The Hub of Database Breaches 2021!

[ezzra]

Not surprised, surprised it didn't happen sooner though... for the Thais, a stark reminder of their past tourism glory and the ashes of past glory that it is now...

[Thujone]

So, hopefully the details given for the vaccination program are as safe as houses...

[sirineou]

Wonderfull!!

I was at my bank a few weeks ago to get my certified account information for my yearly extension, At the Immigration office the officer in charge noticed that one of the bank documents was not mine. They apparently had given me  all the banking information of the expat  that was there before me for the same reason.. 

Lucky we are honest people and destroyed the document immediately. 

When we went back to the bank to rectify the mistake, the person who helped us thought it was funny that the other bank employee was so stupid. 

TIT

[Orinoco]

Thailand -4.0. !!!!!!!!!!!!!!!!!!!  LOL

No surprise to us all

[trainman34014]

39 minutes ago, sirineou said:

Wonderfull!!

I was at my bank a few weeks ago to get my certified account information for my yearly extension, At the Immigration office the officer in charge noticed that one of the bank documents was not mine. They apparently had given me  all the banking information of the expat  that was there before me for the same reason.. 

Lucky we are honest people and destroyed the document immediately. 

When we went back to the bank to rectify the mistake, the person who helped us thought it was funny that the other bank employee was so stupid. 

TIT

Similar thing happened to me three years ago when i was given someone else's papers.    I've also had my name spelt wrong on many occasions on Bank Letters and Bank Books even after it's taken them half an hour to produce them and three different people involved.  Naturally it takes another half an hour to rectify things, no apologies, only giggles.  Thai Banks are the most inefficient i have ever come across anywhere on The Planet !

[ThailandRyan]

Had my second vaccination at MedPark hospital on last Thursday.  When my 30 minutes was up the nurse took my blood pressure and handed me what I thought was my vaccination certificate. It was all in Thai, and then I noticed the birthdate was for someone born in 1988 and was a female.  I went back to the nurse and showed her the certificate and she apologized, but could not find my actual certificate.  Another was then re-printed for me.  Question is does the lady whose certificate I was given have mine or one of a hundred others getting their vaccination that day.  No one bothers to check what they are handing out it appears.  My doctors office hands me the paperwork while still holding on to it and asks me to verify the information is mine and is true and correct.  I then have to sign the bottom of the top copy then review the copy being given to me and then they put the paperwork in an envelope and hand me the slip to give to the cashier.......Not all things are equal it appears from hospital to hospital and when you have a mass amount of folks it appears folks get complacent, just like whoever left the database unlocked for immigrations travelers.....

[FritsSikkink]

The Thai bashers missed the last part of the article in the link:

Comparitech has published many data incident reports like this one, including:

• 35 million US residents’ personal details exposed on the web
• India visa agency exposes 6,500 traveler’s visa applications on the web
• Prison phone service Telmate exposes messages, personal info of millions of inmates
• Social media data broker exposes nearly 235 million scraped profiles
• UFO VPN exposes millions of logs including user passwords
• 42 million Iranian “Telegram” phone numbers and user IDs were breached 
• Details of nearly 8 million UK online purchases leaked
• 250 million Microsoft customer support records were exposed online
• More than 260 million Facebook credentials were posted to a hacker forum
• Almost 3 billion email address leaked, many with corresponding passwords
• Detailed information on 188 million people was held in an unsecured database

-- © Copyright  comparitech 2021-09-21

[kotsak]

1 hour ago, Thujone said:

So, hopefully the details given for the vaccination program are as safe as houses...

I never had spam calls and SMS bothering me for the past 10 years until I started registering for the vax programs..  ????

[ThailandRyan]

13 minutes ago, FritsSikkink said:

The Thai bashers missed the last part of the article in the link:

Comparitech has published many data incident reports like this one, including:

• 35 million US residents’ personal details exposed on the web
• India visa agency exposes 6,500 traveler’s visa applications on the web
• Prison phone service Telmate exposes messages, personal info of millions of inmates
• Social media data broker exposes nearly 235 million scraped profiles
• UFO VPN exposes millions of logs including user passwords
• 42 million Iranian “Telegram” phone numbers and user IDs were breached 
• Details of nearly 8 million UK online purchases leaked
• 250 million Microsoft customer support records were exposed online
• More than 260 million Facebook credentials were posted to a hacker forum
• Almost 3 billion email address leaked, many with corresponding passwords
• Detailed information on 188 million people was held in an unsecured database

-- © Copyright  comparitech 2021-09-21

Please elucidate on how a post like mine is Thai Bashing, as it would be interesting to hear your view on how an actual occurrence such as mine would be viewed by you as bashing.  This is a Thai forum and what happens elsewhere, as you also posted may be a concern to you, but when discussed as the OP was written well do I need to say more.  One wonders if telling of something that did occur, how it occurred, and how it played out over and over again to others is truly considered bashing by your read.  If that is the case, is not the news being reported also bashing.....

[Gottfrid]

2 hours ago, Thujone said:

So, hopefully the details given for the vaccination program are as safe as houses...

Yeah, and then it was about the safety of the Thai construction sector..........

[Orac]

55 minutes ago, FritsSikkink said:

The Thai bashers missed the last part of the article in the link:

Comparitech has published many data incident reports like this one, including:

• 35 million US residents’ personal details exposed on the web
• India visa agency exposes 6,500 traveler’s visa applications on the web
• Prison phone service Telmate exposes messages, personal info of millions of inmates
• Social media data broker exposes nearly 235 million scraped profiles
• UFO VPN exposes millions of logs including user passwords
• 42 million Iranian “Telegram” phone numbers and user IDs were breached 
• Details of nearly 8 million UK online purchases leaked
• 250 million Microsoft customer support records were exposed online
• More than 260 million Facebook credentials were posted to a hacker forum
• Almost 3 billion email address leaked, many with corresponding passwords
• Detailed information on 188 million people was held in an unsecured database

-- © Copyright  comparitech 2021-09-21

non of these look to be leaks from a govt database.

[sirineou]

1 hour ago, trainman34014 said:

Similar thing happened to me three years ago when i was given someone else's papers.    I've also had my name spelt wrong on many occasions on Bank Letters and Bank Books even after it's taken them half an hour to produce them and three different people involved.  Naturally it takes another half an hour to rectify things, no apologies, only giggles.  Thai Banks are the most inefficient i have ever come across anywhere on The Planet !

In the old Soviet Union they had a saying

"They pretend to pay us, and we pretend to work"

a bit of that I think is at work here IMO. 

Anyway, I like to take this opportunity to tell (Deleted) from (Deleted) that I had a look at all your banking information and would like to be your friend ????

[smedly]

that is pretty serious - time some heads started rolling 

 

nothing much more to add

[HeijoshinCool]

.

 

Meh, commented the PM, we don't care, because....

 

We're now only going after affluent big spenders. Peons can go somewhere else. Try the Philippines.

 

Did I mention we are opening for tourism on October 1st?

[Ramdas]

Unsurprisingly ! ????????‍♂️ You just can’t rely not to mention the word “trust “ anyone you’re dealing with your own personal information period, especially over the internet .They’re just too messy and disorganised and needless to say can’t care less ! 

[mikebell]

Other peoples' letters/certificates are frequently given out wrongly; in many cases this results in extra travel, expense and time wasted. There is never an apology; these are the protected and the connected.  There would be severe sanctions in civilised countries.

[rbkk]

47 minutes ago, mikebell said:

Other peoples' letters/certificates are frequently given out wrongly

Hard to fix when the National IQ Level is as far as it is below 100. (89?/91?/94?-different researchers)

[Gottfrid]

Once I heard and read that they had created a so called "war-room" for maintaining cyber security. Maybe they should consider putting the room and the people in it to good use, instead of depressing free speech and everyday opinions on social media.

[rbkk]

16 minutes ago, Gottfrid said:

Once I heard and read that they had created a so called "war-room" for maintaining cyber security. Maybe they should consider putting the room and the people in it to good use, instead of depressing free speech and everyday opinions on social media.

You mean this?

[Gottfrid]

8 minutes ago, rbkk said:

You mean this?

Exactly. You just forgot to put the funny emo´s as faces on the poor bastards like they do in this country. I mean, it must be legal to do so then, right? ???? 

[Mr Meeseeks]

3 hours ago, FritsSikkink said:

The Thai bashers missed the last part of the article in the link:

Comparitech has published many data incident reports like this one, including:

• 35 million US residents’ personal details exposed on the web
• India visa agency exposes 6,500 traveler’s visa applications on the web
• Prison phone service Telmate exposes messages, personal info of millions of inmates
• Social media data broker exposes nearly 235 million scraped profiles
• UFO VPN exposes millions of logs including user passwords
• 42 million Iranian “Telegram” phone numbers and user IDs were breached 
• Details of nearly 8 million UK online purchases leaked
• 250 million Microsoft customer support records were exposed online
• More than 260 million Facebook credentials were posted to a hacker forum
• Almost 3 billion email address leaked, many with corresponding passwords
• Detailed information on 188 million people was held in an unsecured database

-- © Copyright  comparitech 2021-09-21

Top notch whataboutery there.

 

7/10

[Ireland32]

20 years coming and living here , Ridiculous, they can’t even run an app program for gods sake IT in Thailand lol

[Ireland32]

54 minutes ago, Mr Meeseeks said:

Top notch whataboutery there.

 

7/10

Oh no The Thai martyrs are Actively Apologetic 

[FritsSikkink]

3 hours ago, Orac said:

non of these look to be leaks from a govt database.

There have been loads, can't be bothered to look them up. 

[brucegoniners]

Thai tech at it's finest. Soooo, they waited to be hacked to secure the database? Brilliant!

[mr_lob]

Are these the 106 million tourists who arrived last week?

[Destiny1990]

With their full requirements for hundreds of signed photocopies of all our personal information identity theft and other scams are always around the corner. Signed Passport, bankstatements, home address, phone-numbers, emails, photos of urself at ur home inside, some signed documents copied 5x each and submitting 4x a year!!

[Rampant Rabbit]

What we need is  yet another  app, Ill be giving the ususal M.Mouse  D  Duck same as for the covid  nonsense  filling in forms at every shop or some cr app.