Thailand mandates multi-factor authentication following massive data leaks

Thailand is intensifying its cybersecurity measures following reports that over 200 million data records linked to the country are circulating on the dark web. Digital Economy and Society Minister Chaichanok Chidchob announced plans to audit nearly 30,000 government information systems within 15 days to identify vulnerabilities and decommission inactive systems.

To bolster defenses, the ministry is seeking cabinet approval to mandate multi-factor authentication (MFA) for all government agencies. This move aims to prevent unauthorized access using stolen credentials. Officials noted that recent leaks often stem from criminals using passwords purchased on the dark web to access systems through legitimate APIs, rather than direct database hacks.

The government is also working with the National Cyber Security Agency (NCSA) and the Personal Data Protection Committee (PDPC) to enforce the Personal Data Protection Act. Immediate actions include mass password resets and the deletion of dormant accounts. Investigations are ongoing regarding the exposure of personal data belonging to high-ranking officials and potential compromises within civil registration systems.