Thai authorities are investigating reports that more than 36 million records containing Thai citizens' personal data are being offered for sale online.
Boonthida Somchai, deputy minister of the Digital Economy and Society Ministry, has instructed the Office of the Personal Data Protection Committee to work with the National Cyber Security Agency (NCSA) to verify the authenticity of the data and determine whether a data breach occurred.
The NCSA found the original online source posting ads for the sale of personal data after monitoring online sources that promote such activity.
Authorities are conducting technical tests to obtain additional samples of the data and determine whether the dataset represents newly leaked information or a compilation of data originating from earlier breaches.
However, officials stressed there is currently no evidence confirming that the data is genuine, or that it can be linked to a specific government agency or organisation.
The ministry said it would continue to monitor the situation to maintain public confidence.
If the investigation confirms that a personal data breach has occurred, the ministry will take legal action and coordinate with relevant agencies to safeguard the personal information of affected Thais, said Ms Boonthida.
Individuals involved in the purchase, sale or distribution of personal data could face severe legal penalties under Thai law, including a maximum fine of 500,000 baht, imprisonment of up to five years, or both.
She called on government agencies that hold large volumes of citizen data to adhere strictly to the highest standards of information security and data protection.
