Business & Economy Startups Data leak from Thailand telco reveals passport, ID card information

Data leak from Thailand telco reveals passport, ID card information




- Advertisement -

For nearly a month, anyone with the correct URL could simply jump in and download a host of sensitive information


Truemove H, the second-largest telco operator in Thailand, experienced a data leak over the weekend that resulted in sensitive materials of customers — such as passport and national ID card information — to become public.

The leak was discovered by an Irish researcher named Niall Merrigan who lives in Norway. On his personal blog, he detailed his discovery and the response to the issue provided by True.

About 46,000 accounts were discovered on Amazon Web Services’ cloud storage system named the S3 Bucket. The scary part of this particular leak is that all it required was the correct URL and really anybody could download full scans of people’s ID cards or passports.

- Advertisement -

According to Merrigan, he informed True about the leak back in March and the blog post makes it seem as if the company did not move until an imminent article was to be published in The Register.

The data appears to have remained accessible to the public for over one month after the leak was initially reported to when the information was finally removed.

“I checked again on Thursday 12-April 10:00 to verify if the files were available still and they were. At 19:00 they had finally been made private,” Merrigan wrote.

Also Read: Veiris uses blockchain to ease know-your-customer process –and is determined to win the Indonesian market

According to the Bangkok Post, the leak was considered of such a serious nature that the government regulatory body, the National Broadcasting and Telecommunications Commission (NBTC), called in representatives from True for questioning over the weekend.

Last weekend was the Songkran New Year’s festival that is widely celebrated across the Mekong region.

Technically, the NBTC does have the authority to revoke a telco license if it is deemed that the company is leaking sensitive information on purpose.

Also Read: Taiwan e-commerce firm Pinkoi expands into new Asian markets

True will reportedly be called in for further questioning on Tuesday before any actions are taken.

The post Data leak from Thailand telco reveals passport, ID card information appeared first on e27.

Source: e27Follow us on Social Media

Send in your scoops to 

- Advertisement -

Upper Serangoon condo residents losing sleep over 4 fridge-related fires in 2 months 

Singapore—There have been seven fridge-related fires at Riversails Condominium in the past three years, causing much alarm to its residents. Four of the incidents occurred just in the last two months -- the latest in a sixth-floor unit where a fridge caught...

Post goes viral of man who wants to extend hospital stay as nobody cares for him at home

Singapore — A netizen has urged readers on Facebook to take care of their parents while they are still alive, after overhearing an elderly man in a hospital ask to stay longer since, he said, no one took care of him...

Praise for student who eats lunch discreetly out of respect for Muslim friends fasting

Singapore - A student has garnered praise for his sensitivity towards his Muslim friends fasting for Ramadan by eating his lunch discreetly. Syafiq Izwan Kassim, a teacher in Malaysia, took to Facebook on Wednesday (Apr 14) to share an experience with one...
Follow us on Social Media

Send in your scoops to