Personal Data Breach From Government Database Investigated
Thailand's Personal Data Protection Committee launched an urgent investigation into a major breach exposing personal data and ID photos of citizens, including the Prime Minister and cabinet ministers, through online channels on August 4, 20
On August 4, 2025, the Personal Data Protection Committee (PDPC) launched an urgent investigation into the unauthorized release of personal information and identification card photographs of citizens, including the Prime Minister, cabinet ministers, and senior executives through online channels. The committee is coordinating with relevant authorities to act against those who published the data, database custodians, and criminal syndicates engaged in illegal data trafficking and unauthorized access routes.
PDPC Secretary-General Pol. Col. Surpong Plaengkham revealed that technology experts identified personal data and ID card photos from government databases being disseminated online, affecting multiple groups ranging from ordinary citizens to the Prime Minister, ministers, and top officials. The committee has immediately begun coordinating and fact-checking with all relevant agencies.
"Our preliminary investigation shows that this case involves illegally created data or links and unauthorized access to specially protected computer data through criminal networks, which constitutes a violation under the Computer Crime Act, Section 7. This is not merely a general data leak," the PDPC Secretary-General stated. "We have issued comprehensive measures to protect and safeguard citizens' personal data across all dimensions."
The enforcement measures are divided into three categories: downstream action against those posting or disseminating the data without authorization, which violates the Computer Crime Act Section 7; upstream action involving the agencies maintaining the data, specifically the Department of Land Transport and Department of Interior, to audit and remediate their systems and report the breach; and action against criminal networks trafficking in personal data and unauthorized access routes. The PDPC is coordinating with the Digital Economy and Society Ministry and other agencies to pursue criminal prosecutions. Citizens and social media users are warned not to test, forward, or republish the leaked data or access links, as doing so may compound victims' harm and expose participants to legal liability.
