Cyber Incident Victim: Thai University Central Admission System
Date:
Feb 2022
Location:
Thailand
Summary
A cyberattack compromised Thailand's university central admission system, resulting in the theft of personal data belonging to more than 23,000 students. The breached information included names, academic grades, and national identity card details, which were subsequently offered for sale on dark web platforms. The Council of University Presidents of Thailand verified the unauthorized access and data exfiltration, confirming the exposure of sensitive records from university entrance examinations. This incident exposed critical personally identifiable information, potentially enabling identity fraud or other malicious activities targeting affected individuals.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Thai University Central Admission System suffered a data breach resulting in the theft of personal information belonging to more than 23,000 students who participated in university entrance examinations during the previous year. The incident was publicly confirmed by the Council of University Presidents of Thailand following reports that stolen data appeared for sale on dark web marketplaces. Compromised records included sensitive details such as students' full names, academic grades, and national identity card information. The breach was reported by media outlets on February 4, 2022, though the exact timing of the initial intrusion and data exfiltration remained unspecified in available disclosures. No technical details regarding the attack vector or duration of system vulnerability were provided by confirming authorities.
The exposure of national identity card data created significant risks for affected students, as such information is commonly used for financial transactions and official documentation in Thailand. The dark web sale amplified potential misuse scenarios including identity theft and academic fraud. The Council of University Presidents acknowledged the incident but did not publicly outline specific remediation measures or forensic findings. Impacted individuals faced ongoing privacy concerns due to the permanent nature of the exposed identifiers. The breach compromised an entire academic cohort's sensitive records through a centralized education administration system, with no subsequent reports confirming data recovery or removal from illicit platforms.