Personal details of hundreds of foreigners in Thailand leaked online

[webfact]

Expat Personal Records Posted to Govt Site
By Teeranai Charuvastra
Staff Reporter


An interactive map showing the residences, nationalities, passport numbers and other unprotected information about foreign nationals was found freely available on an Immigration Bureau website. Image: Andrew MacGregor Marshall / Facebook

NAKHON SI THAMMARAT — Personal details of hundreds of expats living in the southern province of Nakhon Si Thammarat were laid bare to the internet for hours last night thanks to the weak security of a police immigration website.

Openly available to anyone who visited the site were names, nationalities, passport numbers, professions and home addresses of foreign residents, showing where they all resided on an interactive map. The site, since taken offline, was supposed to be a test of an internal police database under development, according to an immigration police commander.

Full story: http://www.khaosodenglish.com/detail.php?newsid=1459141534

-- Khaosod English 2016-03-28

[SABloke]

Big Brother really IS watching you

[Snig27]

It gives new meaning to the Junta's drive for transparency.

[tomyummer]

No mistake. Probably paid by terrorists to target foreigners down south. Look out folks!

[trogers]

Naahh... Less than a dozen Americans down south...

[Thian]

Why do our wives have to go tell the police that we stay with them in their home? Can't they send a copy of this file to the police as well?

[Chang_paarp]

Web site removed last night after being hacked. (The admin password was ..... . . . .. 123456.)

The site developer who had the live site with information supplied by the Immigration Dept is not answering emails or replying to requests for interviews.

Would love to be a fly on the wall when this gets discussed in various meetings at the Immigration Dept over the next few days

[jamesbrock]

Don't know what the fuss is about, according to Maj. Gen. Thanusilpa, the immigration police commander, no 'important information' was stored on the site.

• name
• nationality
• passport number
• full address
• work details

“There’s nothing on there,” Thanusilpa said...

[Tywais]

Naahh... Less than a dozen Americans down south...

The full map showed more than that in Phuket, which is part of that map's coverage.

[Tywais]

Don't know what the fuss is about, according to Maj. Gen. Thanusilpa, the immigration police commander, no 'important information' was stored on the site.

• name
• nationality
• passport number
• full address
• work details

“There’s nothing on there,” Thanusilpa said...

He didn't see the same map I did. All but work details was there.

[colinneil]

Everything you do in Thailand requires copy of passport, home address etc, so whats the panic about???

[Jingthing]

It was mentioned before that any Thaivisa users who innocently clicked on that site to look at it as it was posted about multiple times last night may be subject to legal issues. Is that really a concern?

[Tywais]

Everything you do in Thailand requires copy of passport, home address etc, so whats the panic about???

So you don't mind everybody and their uncle seeing your personal info and where you live as this was made public and not for non-immigration consumption? Good start for identity theft.

[Tywais]

It was mentioned before that any Thaivisa users who innocently clicked on that site to look at it as it was posted about multiple times last night may be subject to legal issues. Is that really a concern?

I mentioned that as a concern. Probably not a big concern but they may be digging through the IP records of who accessed it to find the original source of the hack. Forgot to turn my VPN on before looking and before knowing what was going on.

[ratcatcher]

Naahh... Less than a dozen Americans down south...

And what about the other oddball aliens? I count at least 8 UK, 7 German,1 Norgeman, 1 Frenchman among those friendly Yanks, not including all the Lao, Cambodians and Chinese..

Edited March 28, 2016 by ratcatcher

[NCC1701A]

"Personal details of hundreds of expats living in the southern province of Nakhon Si Thammarat were laid bare to the internet for hours last night thanks to the weak security of a police immigration website.

Openly available to anyone who visited the site were names, nationalities, passport numbers, professions and home addresses of foreign residents, showing where they all resided on an interactive map. The site, since taken offline, was supposed to be a test of an internal police database under development, according to an immigration police commander."

"Maj. Gen. Thanusilpa, the immigration police commander, played down the “leaks” by claiming no important information was stored on the site, despite evidence suggesting otherwise.

“There’s nothing on there,” Thanusilpa said, adding that immigration police would release an official statement about the matter."

"Further underscoring the vulnerability of the site, some internet users also correctly guessed the password to enter the website’s management system: 123456. "

"Attention to it appears to have first come from former Thailand-based journalist Andrew MacGregor Marshall, who shared it via Facebook on Sunday night to warn foreigners living in the province. “If you are a foreigner living in southern Thailand – including Phuket and Samui – you need to take urgent steps to protect yourself,”

[trogers]

Naahh... Less than a dozen Americans down south...

The full map showed more than that in Phuket, which is part of that map's coverage.

Potential targets down South means, Nakorn and Songkla. Phuket is too far for getting away.

[craigt3365]

Everything you do in Thailand requires copy of passport, home address etc, so whats the panic about???

Agreed. But those details aren't put on the internet for everybody to see. And potentially use to your disadvantage. Identity theft is a big issue these days.

[Colabamumbai]

And I thought they only knew how to log in to Facebook.

[lkv]

You no understand.

This no leak.

This demo.

[terryp]

Good job immigration cleared out all the bad guys or this could have been a real problem …absolute donkeys with ZERO credibility

[Guitar God]

What are the gold colored markers with the trident/crown figures on the map?

[NCC1701A]

“Many thanks to the person who cracked the administrator password of the website, and the person who used this password to access the site and delete all of the data. The website is now offline. Now we need answers on why this data was published in the first place,”

https://asiancorrespondent.com/2016/03/apparent-data-leak-leaves-foreigners-in-southern-thailand-anxious/

[Thian]

"Personal details of hundreds of expats living in the southern province of Nakhon Si Thammarat were laid bare to the internet for hours last night thanks to the weak security of a police immigration website.

Openly available to anyone who visited the site were names, nationalities, passport numbers, professions and home addresses of foreign residents, showing where they all resided on an interactive map. The site, since taken offline, was supposed to be a test of an internal police database under development, according to an immigration police commander."

"Maj. Gen. Thanusilpa, the immigration police commander, played down the “leaks” by claiming no important information was stored on the site, despite evidence suggesting otherwise.

“There’s nothing on there,” Thanusilpa said, adding that immigration police would release an official statement about the matter."

"Further underscoring the vulnerability of the site, some internet users also correctly guessed the password to enter the website’s management system: 123456. "

"Attention to it appears to have first come from former Thailand-based journalist Andrew MacGregor Marshall, who shared it via Facebook on Sunday night to warn foreigners living in the province. “If you are a foreigner living in southern Thailand – including Phuket and Samui – you need to take urgent steps to protect yourself,”

If i was a CEO from a multinational who had his details published on this website i allready would be in the plane now.

[NCC1701A]

https://www.facebook.com/youngcyber/posts/10208042371364442

[ScotBkk]

And I thought they only knew how to log in to Facebook.

It's an undercover operation for the most dispicable unlawful crime to hit Thailands shores for many years. Such a ghastly deed perpetuated by selfish unconcerned individuals having no respect for ex-pats welfare who they themselves personally hate and despise, expressing their daily disgust at the humiliation they've encountered being associated with these parasites only through being born in the same country before they got their amulets and thainess rights.

Yeah' you guessed it - OVERSTAYERS !!!!!

Edited March 28, 2016 by ScotBkk

[realenglish1]

Don't know what the fuss is about, according to Maj. Gen. Thanusilpa, the immigration police commander, no 'important information' was stored on the site.

• name
• nationality
• passport number
• full address
• work details

“There’s nothing on there,” Thanusilpa said...

Shows you the intelligence of the Commander

[ozyjon]

Am i on the map

anybody knows

(maybe everybody knows)

[shagorillaHotel]

perhaps a class action by all living in the southern provinces which were definitely there not just Nakorn si Thamarat to sue the immigration department for breach of trust and public disclosure of private information and public endangerment in a terrorist zone will assist them in becoming less blasé with aliens data

Edited March 28, 2016 by shagorillaHotel

[jamesbrock]

As this Andrew MacGregor Marshall posted on Facebook, "the scariest part of the story is that Thai immigration officials gave freelance programmer Akram Aleeming highly sensitive data including names, addresses and passport details of foreigners in southern Thailand, so he could build his "test" system. That's where the real data breach occurred."

This Akram Alleging guy is supposedly a Computer Science from Thaksin University, and he uses the least secure "password" possible, and leaves personal information open because he "didn’t think anyone would find the website"??