BANGKOK, THAILAND – An anonymous seller is offering a file containing personal data of allegedly 36.1 million Thais in an underground forum for $100,000 USD.
Millionen Datensätze für 100.000 Dollar
For nearly $100,000 USD, payable in the difficult-to-trace cryptocurrency Monero, the entire data stock is reportedly changing hands. If the claim is true, between 50 and 70 percent of all adult citizens in Thailand could be affected. The payment in Monero is no coincidence; the digital currency is considered significantly harder to trace on underground markets than Bitcoin or other cyber-currencies.
The seller boasts of a complete package: the file contains full names, phone numbers, birth dates, genders, and current addresses. He claims to have obtained the information from a mix of government and private sources. It remains entirely unclear whether this is fresh data, repackaged old leaks, or a combination of several previous data thefts.
Echtheit steht in den Sternen
The specialist portal Daily Dark Web made the alleged data outflow public, but immediately stressed that no one has independently verified its authenticity. Neither the origin nor the actual number of victims is secured. The question of whether the data sets are newly acquired or pieced together from earlier leaks also remains open.
Analysten sehen potenziell grössten Treffer auf Schwarzmärkten
Cybersecurity experts are already assessing the dimension as extremely explosive. If genuine, it would be one of the largest data theft cases of Thai citizens ever seen on online black markets. At the same time, they urge for technical verification and irrefutable proof before one is blinded by the sheer million count.
Experten warnen vor Identitätsklau in Serie
A data treasure of this magnitude would be fuel for mass identity fraud. SIM card hijacking, financial fraud, targeted attacks on account recovery, and social engineering campaigns would be wide open. Particularly insidious is that stolen personal data is repeatedly channeled through dark web marketplaces, making the original source almost impossible to trace.
Keiner will es gewesen sein – Schweigen von Behörden und Firmen
Not a single government agency or private data administrator has publicly confirmed or denied the claim so far. Responsible parties would first need to narrow down the origin and authenticity before they can even assess implications for the population. The portal Manager Online reports that cybersecurity specialists will conduct a more detailed examination of the data sets in the coming days to clarify whether they are genuine, outdated, or intertwined with old leaks.