Thai agencies probe sale of 36 million personal data records online

Thailand's Digital Economy and Society Ministry is launching a thorough investigation into allegations that a massive database containing the personal information of over 36 million Thai citizens is being offered for sale on the internet. Deputy Minister Ms Boonthida Somchai has directed the Office of the Personal Data Protection Committee to work closely with the National Cyber Security Agency (NCSA) to probe the claims.

The investigation was prompted by online reports detailing the alleged sale of a substantial database. The NCSA has already identified the original online source advertising the data. Authorities are currently conducting technical tests on sample records to determine if the leaked information is recent or a compilation from previous data breaches. However, officials emphasize that there is currently no concrete evidence confirming the data's authenticity or linking it to a specific government agency or organization.

“

Individuals involved in the purchase, sale or distribution of personal data could face severe legal penalties under Thai law, including a maximum fine of 500,000 baht, imprisonment of up to five years, or both.

Ms Boonthida stressed the importance of maintaining public confidence and stated that the ministry will continue to monitor the situation closely. If the investigation confirms a personal data breach, legal action will be pursued, and relevant agencies will coordinate to protect the affected citizens' information. The deputy minister warned that individuals found to be involved in the purchase, sale, or distribution of personal data could face severe legal consequences under Thai law, including fines of up to 500,000 baht, imprisonment for up to five years, or both.

Furthermore, Ms Boonthida urged all government agencies holding large volumes of citizen data to strictly adhere to the highest standards of information security and data protection. Agencies found to be negligent or complicit in any unlawful handling of personal information will face the full extent of legal action, she added.

“

Agencies found to be negligent or complicit in any unlawful handling of personal information will face legal action to the fullest extent of the law.