Bangkok: TSD explains the data hack affecting 200,000 users, stating they are urgently closing the vulnerabilities and confirming that it will not affect securities or transactions. TSD has clarified the data breach affecting 200,000 individuals, stating that the leak only includes personal information such as names, surnames, national ID numbers, addresses, and bank account numbers. They are urgently closing the vulnerability and confirm that there will be no impact on securities or transactions. Investors are urged not to panic. TSD emphasizes that alerts were sent via SMS and email only, and no links were sent; therefore, investors should not click on any links. Inquiries can be made 24 hours a day.
According to Thai News Agency, on July 25, 2026, the Thailand Securities Depository Co., Ltd. (TSD) discovered unauthorized access to some personal data of users in the TSD Investor Portal system. Ms. Pichaya Chomchaiya, Managing Director of TSD, revealed that after detecting unauthorized access through the user ID of one user, they discovered multiple attempts to change the user ID. TSD promptly blocked access to the system and coordinated with the Cyber Crime Investigation Bureau (CCIB) to pursue the perpetrators. The investigation revealed that approximately 200,000 users out of a total of 5 million accounts were affected.
Mr. Thirapan Sarapkit, IT Manager of TSD, explained that the unauthorized access was due to a vulnerability in the User Profile page, which allowed users to change their ID number and extract personal data from other users. TSD has since upgraded its cybersecurity measures and fixed the code causing the problem. They are ready to use AI to inspect and scan all systems to identify vulnerabilities.
Pol. Lt. Col. Pakrit Krityapong, Cyber Security Officer of the Technology Crime Investigation and Analysis Division (TCID), warned investors about scams involving impersonation of TSD and other financial institutions. He emphasized that investors should not click on links in messages, as TSD does not send messages with links for transactions or personal information disclosure.
Mr. Assadej Kongsiri, Director and Manager of the Stock Exchange of Thailand (SET), apologized to investors, confirming SET's urgent actions to close system vulnerabilities and coordinate with banks and securities firms. He reassured that the leaked data cannot be used for direct transactions, and no abnormal transactions have been detected. The SET is expediting data security upgrades to prevent future incidents.