Phadorn: Public Data Leak Caused by Compromised Passwords, Not a Hack
The Minister to the Prime Minister's Office clarifies that recent leaks of vehicle registrations and personal data stemmed from leaked credentials used in legitimate system logins, ordering strict security upgrades within 30 days.
Stock photo for illustration only, not from the actual event
- Investigation confirms the public data leak was not the result of a system hack.
- The breach occurred when previously leaked credentials were used to log into official systems.
- Roughly 800 individual citizens' records were queried during the incident.
- The government mandates Multi-Factor Authentication across all databases within 30 days.
On August 5, 2026, Ms. Lalida Periswiwatana, Deputy Spokesperson for the Prime Minister's Office, revealed updates regarding the recent online exposure of Thai citizens' vehicle registration and personal data, which sparked widespread public concern. Minister to the Prime Minister's Office Phadorn Prissananantakul convened an urgent meeting with the National Cyber Security Agency (NCSA), investigative bodies, database custodians, and related agencies to compile the facts and formulate prevention measures against future occurrences.
Initial investigation results revealed that the incident was not caused by a system hack or a mass extraction of government databases. Instead, malicious actors used preexisting leaked usernames and passwords to log into the systems under normal access rights, subsequently querying data on a case-by-case basis. Authorities currently estimate that approximately 800 individuals' data was searched, and all activities can be historically tracked through system logs.
Stock photo for illustration only, not from the actual event
Following the breach, Minister Phadorn issued strict directives for all relevant agencies holding citizen data to urgently enhance their cybersecurity measures. All data storage systems, both legacy and new, are now required to implement Multi-Factor Authentication (MFA). The government has set a firm 30-day deadline for these security protocols to be fully operational and deliver concrete results.
When unauthorized actors gain access using legitimate credentials, it often highlights a vulnerability known as credential stuffing, where attackers exploit password reuse across different platforms. This type of breach is notoriously difficult to detect via traditional perimeter defense alone, making Multi-Factor Authentication an essential safeguard to prevent unauthorized access even if passwords are compromised.
Furthermore, the government ordered the implementation of comprehensive Audit Logs and instructed agencies previously flagged for credential leaks to resolve their vulnerabilities immediately. Authorities also urged citizens to avoid reusing passwords across multiple online services and to enable two-factor authentication on critical accounts to ensure digital safety.
Source: Khaosod Politics
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment