Cyber Incident Victim: Supreme Court of Thailand
Date:
Jan 2016
Location:
Thailand
Summary
Anonymous exposed 1GB of sensitive data from Thailand's Supreme Court, including payrolls, budget files, pension information, and criminal case records, following a DDoS attack and server breach. The hacktivist group, collaborating with Blink Hacker Group, compromised the institution's web server, which improperly stored operational databases on a single vulnerable machine. The leak was part of Operation #BoycottThailand, a protest against the court's death sentence for two Myanmar migrant workers convicted of crimes against British tourists. Anonymous alleged systemic corruption, evidence tampering, and torture by Thai authorities, claiming the justice system prioritized preserving the country's tourism image over fair trials for immigrants.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On January 16, 2016, the hacktivist group Anonymous publicly released approximately 1GB of data belonging to Thailand’s Supreme Court, marking the tenth day of their #BoycottThailand operation. The breach occurred during coordinated distributed denial-of-service (DDoS) attacks against hundreds of Thai court websites the preceding Wednesday. During these attacks, the Blink Hacker Group—a subdivision of Anonymous—discovered and extracted the data while attempting to deface the Supreme Court’s website. The compromised information included internal operational documents, payroll records, pension details, budget files, and sensitive criminal case data. Hackers attributed the breach to negligent security practices by the court’s system administrator, who stored the entire database on a single machine and used the web server as a primary data repository. The stolen files were uploaded to public platforms the day before the announcement, exposing institutional vulnerabilities. No immediate containment efforts or technical responses from the Supreme Court were documented in the disclosure.
Anonymous initiated #BoycottThailand in response to the Thai Supreme Court’s death sentences for two Myanmar migrant workers convicted of raping and murdering British tourists. In a 37-minute video and press statement, the group condemned Thailand’s justice system for relying on allegedly fabricated evidence, systematic torture of defendants, and recurrent loss of exculpatory evidence in cases involving foreign tourists. They cited these patterns as evidence of institutional corruption designed to preserve Thailand’s tourism-friendly image at the expense of marginalized immigrants. The data leak aimed to amplify scrutiny of the judiciary’s operational transparency and investigative integrity. While the direct consequences of the breach were unspecified, the exposure of payroll and criminal records highlighted systemic security failures and fueled Anonymous’s broader critique of Thailand’s legal framework.