Cyber Incident Victim: CAT Telecom PCL
Date:
Oct 2015
Location:
Thailand
Summary
Anonymous breached a Thai state-owned telecommunications company, leaking customer login credentials and government officials' personal data while stealing confidential documents related to the government's controversial single internet gateway policy aimed at centralized online control. The attack caused temporary website downtime and was part of a broader campaign opposing the policy, which critics compared to internet censorship firewalls, marking continued hacktivist operations against Thai authorities over perceived suppression issues.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In October 2015, the hacktivist group Anonymous launched a cyberattack against CAT Telecom Pcl, Thailand’s state-owned telecommunications provider, in retaliation against the Thai government’s proposed single internet gateway policy. The incident began with Anonymous declaring operational intent under the banner of "Operation Single Gateway," framing the policy as a tool for government surveillance and suppression. On October 22, 2015, observers noted CAT Telecom’s website (cattelecom.com) experiencing downtime, with social media posts suggesting Anonymous involvement. By October 23, the website remained inaccessible for several hours. On October 24, Anonymous-affiliated Twitter accounts (@YourAnonNews, @anonymousAsia) publicly disclosed stolen data, including internal server details, customer login credentials, and Thai government officials’ personally identifiable information such as IDs, names, and contact numbers. The group also claimed exfiltration of confidential documents detailing the government’s single gateway implementation plans. CAT Telecom restored website functionality by October 24, though no official statement regarding remediation efforts was cited in available reports.

The attack directly supported Anonymous’ broader campaign against Thailand’s internet governance policies, which critics likened to China’s restrictive "Great Firewall." The single gateway initiative, revealed through a leaked cabinet document weeks earlier, aimed to centralize internet traffic monitoring, enabling content filtering and surveillance of dissent. Anonymous contextualized the CAT Telecom breach as both a protest against this policy and a continuation of prior operations targeting Thai authorities. In May 2015, the group had compromised Thailand’s Senate and Public Health Ministry websites, leaking credentials to oppose alleged state complicity in human trafficking. The 2015 CAT Telecom incident highlighted recurring tensions between the Thai government and hacktivists over digital rights, with immediate impacts including temporary service disruption, exposure of sensitive customer and government data, and reputational damage to a critical state infrastructure provider. No post-incident forensic findings or long-term operational consequences for CAT Telecom were detailed in the disclosed records.
