Thai Stock Exchange Says Data Breach Won't Affect Investor Assets
The Stock Exchange of Thailand confirmed a data breach on its investor portal exposed personal information but did not compromise investor assets, as no usernames or passwords were leaked. SET is strengthening cybersecurity measures and coo
The Stock Exchange of Thailand (SET) confirmed that a partial breach of investor data on its TSD Investor Portal did not compromise investor assets because no usernames or passwords were leaked. The exchange is strengthening cybersecurity measures, conducting deep investigations, monitoring suspicious transactions, and coordinating with all securities firms and commercial banks to track related accounts and prevent losses while restoring investor confidence.
According to Assdej Kongsiri, chairman and managing director of the SET, following the unauthorized access to personal information of TSD Investor Portal users, the exchange has conducted a detailed system examination and expanded its investigation scope to identify the cause and patch vulnerabilities. The team is working intensively and upgrading cybersecurity safeguards.
The SET has also coordinated with all securities companies and commercial banks to jointly monitor and track customer accounts affected by the breach. Transactions from affected accounts are being reviewed as special cases, and any unusual activity will be investigated and addressed immediately to protect investor assets.
Kongsiri confirmed that as of now, no investor assets have been harmed, and the accessed data did not include usernames or passwords that could be used to access systems or conduct transactions. Therefore, outside parties cannot directly access investor accounts.
The SET is continuously monitoring system transactions and conducting historical reviews to analyze attack patterns and whether they occurred previously, using this information to strengthen preventive measures. Kongsiri noted that the accessed data consists only of basic registration and profile information, not data needed to transfer assets or conduct securities transactions directly. The exchange will continue close monitoring and ongoing improvements to cybersecurity standards to protect data and maintain long-term investor confidence.