Resecurity, a California-based cybersecurity company protecting Fortune 500, has identified leaked PII stolen from Thailand’s Department of Medical Sciences containing information about citizens with COVID-19 symptoms. The incident was uncovered last week and shared with Thai CERT.
The data was put for sale on several Dark Web marketplaces and was available for further purchase via a Telegram channel created by the bad actors.
Based on the acquired samples and additional insights related to the security incident, the bad actors were able to gain unauthorized access to the government portal allowing them to manage users and records illegally.
Resecurity has timely shared the exposed leaked data with the relevant authorities and law enforcement to ensure the affected citizens will be protected in the scope of the existing privacy laws and data protection regulations in Thailand.
To prevent yourself from being a victim of identity theft – subscribe to Resecurity® Identity Protection (IDP), a mobile app and interactive WEB-service featuring a dashboard for continuous 24/7 protection. Resecurity® enables Dark Web monitoring, leaked credentials detection, and timely alerts about other identified threats targeting your persona online.