Deputy DE Minister Orders PDPC and NCSA to Investigate Alleged Leak of Thai Citizens’ Data, Warns Personal Data Trading Carries Up to 5 Years’ Imprisonment
Ms. Nann Boontida Somchai, Deputy Minister of Digital Economy and Society (DE), revealed that following reports claiming that more than 36 million records of Thai citizens’ personal data have been offered for sale, she has instructed the Office of the Personal Data Protection Committee (PDPC) to integrate its efforts with the National Cyber Security Agency (NCSA) to investigate and verify the facts surrounding the case.
According to the NCSA’s preliminary investigation, the agency has been monitoring and examining the sources where the alleged data is being advertised for sale. The investigation involves analytical procedures to verify the authenticity of the information, including comparisons with data leaks that have previously surfaced. Based on the sample data provided by the seller, authorities have identified a source containing an announcement with content similar to the information currently being circulated. Further testing is underway to extract sample data for in-depth analysis to determine whether the dataset consists of newly leaked information or data compiled from previous data breach incidents.
However, there is currently no evidence confirming that the data is genuine or linking it to any specific organization. The Ministry of Digital Economy and Society will continue to closely monitor and investigate the matter to maintain public confidence. If the investigation confirms that a personal data breach has occurred, the Ministry stands ready to take legal action and coordinate with relevant agencies to fully protect citizens’ personal information.
“The Ministry urges the public to closely follow information released by government agencies and to exercise greater caution when disclosing personal information, answering calls from unknown individuals, clicking links, or providing sensitive information through online channels. At the same time, we would like to remind the public that involvement in the buying or selling of personal data is a criminal offense carrying a maximum penalty of a fine of 500,000 baht, imprisonment for up to 5 years, or both. We also call on government agencies that hold large volumes of citizens’ information to strictly implement the highest standards of data security to prevent personal data leaks. Should any negligence or participation in such offenses be discovered, legal action will be taken to the fullest extent of the law,” the Deputy Minister of Digital Economy and Society said.
