Just when you thought the process for foreigners in Thailand to register for a COVID-19 vaccine online could not get any more shambolic, the website used for registrations was abruptly taken offline on Monday due a purported data breach.
Reports first surfaced on social media over the weekend that a glitch in the website meant that some user data was accessible to the public.
It appeared that it was possible to view the personal information of the last person who registered on the site. The data on display included name, address, date of birth and passport number.
On Monday, blogger Richard Barrow appeared to confirm the data leak.
“URGENT WARNING: If you are using the http://thailandintervac.com website to register for a vaccine appointment, please be aware ALL of your personal details are freely available”, Richard tweeted.
In a series of tweets, Richard explained how he was able to access the information of a different user every “five or ten minutes”.
Richard made it clear that he was not hacking the website but that the personal information was open to anyone who was using the site.
Normally you would need username/password to edit user information. I’m not doing that. Every five or ten minutes there is a new name. I am presuming Peter from Prachuap Khiri Khan was the last person to register. To be clear, I am NOT hacking the site. This is open to anyone. pic.twitter.com/gsBYKoQS3W
— Richard Barrow (@RichardBarrow) June 14, 2021
Other users commenting on Richard’s Twitter thread posted screenshots which also appeared to confirm they too were able to access other people’s information.
The website being taken offline is the latest in series of embarrassing issues related to foreigners in Thailand being able to register for vaccinations.
Today (June 14) was meant to be when the online registration portal was available to all foreigners in Thailand, however, the website has recently been updated to say that registrations are not currently available.