Thai Stock Exchange Depository Company Hacked, 200,000 Investors' Data Leaked

Thailand Securities Depository (TSD), a subsidiary of the Stock Exchange of Thailand (SET), has revealed a security breach impacting approximately 200,000 investors. The incident occurred on TSD's investor portal and was first detected on July 25. While personal data was compromised, the company confirmed no financial losses or unusual activity in securities have been observed.

The breach is suspected to stem from a flaw in the website's code. Reports indicate hackers utilized logged-in accounts and manipulated user IDs within the web address to bypass access controls and read other users' data, a vulnerability known as Broken Access Control.

The leaked information included investors' names, birth dates, identification numbers, addresses, phone numbers, email addresses, as well as the names of brokerage firms and trading account details. However, TSD emphasized that core sensitive data, such as shareholding records, trading history, and passwords, were not compromised.

TSD has reported the incident to relevant regulatory bodies and directly notified all affected investors. The company is urging investors to remain vigilant against potential fraud attempts where malicious actors might impersonate official institutions.