Thailand Post Confirms Major Data Breach, 19 Million Records Leaked to Dark Web

[Georgealbert]

 

Pictures courtesy of Matichon.

 

Thailand Post (Thailand Post Co., Ltd.) has confirmed a significant data breach in which 19 million user records were stolen and leaked onto the dark web. The organisation has since taken immediate action to seal the vulnerability and enhance its data protection measures.

 

In an official statement released on its Facebook page, the state enterprise admitted that customer information had been accessed without authorisation. However, it clarified that no financial transaction data was compromised in the breach.

 

The company issued a formal apology to its users and stated that it had already shut down the access point exploited by the attackers. Thailand Post also announced a tightening of its data security protocols and reaffirmed its commitment to safeguarding personal information.

 

To address the incident, Thailand Post is now working closely with the National Cyber Security Agency (NCSA) and the Personal Data Protection Committee (PDPC) to investigate the breach and implement robust preventative measures. Legal proceedings have also been initiated in response to the unlawful access and sale of the data.

According to reports, the stolen data, comprising 19 million records, was offered for sale on dark web marketplaces.

 

The investigation is ongoing as authorities work to determine the full impact of the breach and identify those responsible.

 

-- 2025-04-05

 

[JoePai]

The only surprise is it has not happened before 

[Gsxrnz]

With the medieval address system used in Thailand, even the official Thailand Post drivers can't find you anyway. This data is worth about the price of an iced coffee. 

[Tropicalevo]

'Horse, door, bolted' springs to mind here.

Again.

[hotchilli]

8 hours ago, Georgealbert said:

Thailand Post (Thailand Post Co., Ltd.) has confirmed a significant data breach in which 19 million user records were stolen and leaked onto the dark web. The organisation has since taken immediate action to seal the vulnerability and enhance its data protection measures.

A tad late for 19 million

[Gandtee]

8 hours ago, Gsxrnz said:

With the medieval address system used in Thailand, even the official Thailand Post drivers can't find you anyway. This data is worth about the price of an iced coffee. 

A relative from Oz paid me a surprise visit but couldn't find me on the address all my mail is delivered to. In the end, the cab driver took him to the police station, and the police escorted him to my house. What sort of info has been leaked?

[rough diamond]

1 hour ago, Gandtee said:

In the end, the cab driver took him to the police station, and the police escorted him to my house.

Well done to the police!

I hope you tipped them! 😀

[phetphet]

When you post something EMS and they ask to see your passport, are all your details entered into their systems and kept?

 

If so the hackers likely have my passport details, name, address and phone number.

 

If on a trip to BKK, I go shopping, I normally  box everything up and EMS it back to Samui. It's pretty quick, cheap, and saves me having to carry it  on the plane.

 

 

 

 

[johng]

10 minutes ago, phetphet said:

If so the hackers likely have my passport details, name, address and phone number.

Don't worry immigration was hacked a few years ago so the probably have all that info already.

[mfd101]

1 hour ago, Gandtee said:

A relative from Oz paid me a surprise visit but couldn't find me on the address all my mail is delivered to. In the end, the cab driver took him to the police station, and the police escorted him to my house.

A fail-safe system.

[it is what it is]

10 hours ago, JoePai said:

The only surprise is it has not happened before 

 

well yea, happens in many countries around the world, so thailand has done well to have gone so long without a major data breach.

[AustinRacing]

I’ve had credit cards sent via post from overseas stolen. All taken by postal staff and used to purchase goods online, as the record showed. No surprise they sold data on dark web. They just help themselves. Thieves.