Details of 106 million tourists to Thailand leaked online in data breach

file photo

The personal details of 106 million foreign tourists to Thailand have been leaked online, cyber security experts have discovered.

The data was leaked in August, according to a report released on Monday (Sept 20) by British based cyber security firm Comparitech.

The company said it discovered a database containing the personal information of “any foreigner who travelled to Thailand in the last decade might have had their information exposed in the incident”.

Comparitech’s head of cybersecurity research, Bob Diachenko said he was even able to find his own personal data in the leak, having previously visited Thailand on holiday.

According to Diachenko the data goes back to 2011 and includes names, passport numbers and visa status.

The data leak was discovered on August 21 with the Thai authorities securing the data on August 22. They maintain “the data was not accessed by any unauthorised parties”.

“However we do not know how long the data was exposed prior to being indexed,” the report said.

Pre-pandemic approximately 40 million tourists visited Thailand annually.

This isn’t the first time a major data leak has been discovered in Thailand.

As recently as June this year, the website set up by the government to enable foreigners in Thailand to register to receive a COVID-19 vaccination was found to be exposing the names and passport details from people who registered on the site.