Thai Government Database Leaks and Crypto Black Market Sales

MGR Online•Economy•20d ago

Reader Briefing

Massive leaks of Thai government databases, including high-resolution facial images and student data, are being sold on the dark web using cryptocurrency.

•High-resolution facial images of the Prime Minister, Cabinet ministers, and millions of citizens leaked from the Ministry of Interior.
•The Office of the Vocational Education Commission (OVEC) database containing 2.5 million students was protected by the password "123456".
•Personal data is being sold on the dark web for prices ranging from 0.003 to 0.50 baht per record.
•Tanarat Kuawatanaphan of DomeCloud reported these security failures on August 4, 2026.

Overview

•Data records are being traded on the dark web at an average price of less than one baht per item, specifically between 0.003 and 0.50 baht.
•Tanarat Kuawatanaphan stated that high-resolution images from the Ministry of Interior are ideal for creating AI Deepfakes for fraudulent e-KYC identity verification.
•The Office of the Vocational Education Commission (OVEC) database of 2.5 million students was found to be secured with the password "123456".
•In March 2023, the "9Near" hacker group threatened to release 55 million records, leading to the arrest of a Sergeant First Class soldier.
•Resecurity reported in January 2024 that 27 million Thai records from at least 7 government agencies were leaked.
•In February 2024, 19.7 million records from the Department of Older Persons were put up for auction.
•In June 2026, health system data of 67.1 million living and deceased persons were leaked.
•Hackers use Monero and Crypto Mixers to launder money and hide transactions from financial institutions and regulators.

Full article content is available on the original source.

Read on MGR Online (Thai Version)View in Google Translate

Source: MGR Online (Original)

View Original Article

Key Entities

Organization

Ministry of Interior(กระทรวงมหาดไทย)ℹ️

The government agency from which high-resolution facial images of the Prime Minister, Cabinet, and citizens leaked.

Office of the Vocational Education Commission(สำนักงานคณะกรรมการการอาชีวศึกษา)

The agency whose database of 2.5 million students was secured by the password "123456".

Office of the Personal Data Protection Committee(สคส.)ℹ️

The body responsible for enforcing the Personal Data Protection Act, criticized for being lenient toward government agencies.

DomeCloud

The organization where Tanarat Kuawatanaphan serves as a high-level executive.

9Near

A hacker group that threatened to release 55 million personal records in March 2023.

Resecurity

A global cybersecurity firm that warned of 27 million leaked Thai records in January 2024.

Department of Older Persons(กรมกิจการผู้สูงอายุ)

The agency whose 19.7 million records of elderly people were auctioned in February 2024.

Person

Tanarat Kuawatanaphan(ธนารัตน์ กัววัฒนาพันธ์)

A high-level executive of DomeCloud who exposed the lack of government cybersecurity standards on August 4, 2026.

Law

Personal Data Protection Act 2019(พ.ร.บ. คุ้มครองข้อมูลส่วนบุคคล พ.ศ. 2562)

The law under which the Office of the Personal Data Protection Committee operates.