NHSO Confirms No Data Leak After Online Post Claims to Sell Information, Raises Security Measures

On February 17, 2024, Prateung Pao-dit, Assistant Secretary of the National Health Security Office (NHSO), addressed an online social media post claiming to sell data related to NHSO through Discord, which reportedly included 'data' and 'API' sections. NHSO immediately dispatched Cyber and CSOC teams with external experts to investigate, confirming no data had leaked from their system. Prateung explained that technical checks of system logs and network firewalls found no evidence of system breach or data extraction. The investigation suggests that the claimed 'NHSO data' might be a mix of personal information from various sources, combined with leaked data from other sources, using NHSO's name to appear credible. Despite confirming no actual data leak, NHSO will implement enhanced security measures, including strengthening two-factor authentication for systems handling personal data, drafting new API connection regulations, and preparing stricter oversight for system access.