PDPC Investigates Bangchak Data Breach Affecting 6.5 Million Records

[Georgealbert]

 

Picture courtesy of ThaiRath.

 

Thailand’s Personal Data Protection Committee (PDPC) is urgently investigating a significant data breach involving Bangchak Corporation Public Company Limited, after the company reported unauthorised access to its customer feedback system affecting approximately 6.5 million records.

 

According to a statement released via the PDPC Thailand Facebook page on 11 April, Bangchak first detected the breach on 9 April and took immediate action to block the unauthorised access and secure the affected systems. The compromised data came from a platform used to collect customer feedback.

 

The PDPC has directed Bangchak to conduct a thorough internal investigation and provide a full report detailing the nature of the exposed data, the impact on customers, the root cause of the breach, and a risk assessment. The agency is also assessing whether there has been a violation of Thailand’s Personal Data Protection Act (PDPA), which could result in legal action if non-compliance is found.

 

In response to the breach, Bangchak has sent SMS alerts to affected customers. The company stated that no sensitive personal or financial data was compromised. However, it warned users not to click on suspicious links or share their OTP (One-Time Password) codes with others, a common tactic in phishing and fraud schemes.

 

The PDPC reiterated the importance of adhering to data protection laws and emphasised that preventative measures must be taken to avoid similar incidents in the future.

 

-- 2025-04-13

 

[watchcat]

1 hour ago, Georgealbert said:

Bangchak Corporation Public Company Limited, after the company reported unauthorised access to its customer feedback system affecting approximately 6.5 million records.

 

Hence  I always use cash money.