Thailand Post Confirms Major Data Breach, 19 Million Records Leaked to Dark Web

[Georgealbert]

 

Pictures courtesy of Matichon.

 

Thailand Post (Thailand Post Co., Ltd.) has confirmed a significant data breach in which 19 million user records were stolen and leaked onto the dark web. The organisation has since taken immediate action to seal the vulnerability and enhance its data protection measures.

 

In an official statement released on its Facebook page, the state enterprise admitted that customer information had been accessed without authorisation. However, it clarified that no financial transaction data was compromised in the breach.

 

The company issued a formal apology to its users and stated that it had already shut down the access point exploited by the attackers. Thailand Post also announced a tightening of its data security protocols and reaffirmed its commitment to safeguarding personal information.

 

To address the incident, Thailand Post is now working closely with the National Cyber Security Agency (NCSA) and the Personal Data Protection Committee (PDPC) to investigate the breach and implement robust preventative measures. Legal proceedings have also been initiated in response to the unlawful access and sale of the data.

According to reports, the stolen data, comprising 19 million records, was offered for sale on dark web marketplaces.

 

The investigation is ongoing as authorities work to determine the full impact of the breach and identify those responsible.

 

-- 2025-04-05

 

[JoePai]

The only surprise is it has not happened before 

[Gsxrnz]

With the medieval address system used in Thailand, even the official Thailand Post drivers can't find you anyway. This data is worth about the price of an iced coffee. 

[Tropicalevo]

'Horse, door, bolted' springs to mind here.

Again.

[hotchilli]

8 hours ago, Georgealbert said:

Thailand Post (Thailand Post Co., Ltd.) has confirmed a significant data breach in which 19 million user records were stolen and leaked onto the dark web. The organisation has since taken immediate action to seal the vulnerability and enhance its data protection measures.

A tad late for 19 million