Cyber Incident Victim: Thailand Prison Administration
Date:
Jan 2016
Location:
Thailand
Summary
Anonymous-affiliated hackers targeted the Thai prison system's online infrastructure, disrupting 20 websites with 19 remaining offline following a DDoS attack. The Blink Hacker Group claimed responsibility as part of their #OpBoycottThailand campaign, protesting perceived injustices in the Koh Tao murder case where two Myanmar nationals received death sentences. The group alleged evidence fabrication and torture by Thai authorities, mirroring prior cyber operations against 300 court websites—which included leaking Supreme Court data—and takedowns of police sites. Their actions aimed to condemn investigative misconduct and protect tourism interests over judicial integrity.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 4 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 3 actors | Available to members | Available to members |
Description
On January 28, 2016, hackers affiliated with the Anonymous collective launched a coordinated cyberattack against Thailand's prison system infrastructure. Members of the Blink Hacker Group claimed responsibility for distributed denial-of-service (DDoS) attacks that targeted 20 websites belonging to Thai prison authorities. The attacks commenced the previous night and successfully disrupted online services, with 19 prison websites remaining offline at the time of reporting. Only the Corrections Department website remained operational following the initial assault. This incident formed part of an ongoing campaign under the #OpBoycottThailand operation, which the group initiated following the controversial Koh Tao murder case that resulted in death sentences for two Myanmar migrant workers. The same hacking collective had previously executed DDoS attacks against 300 Thai court websites and leaked 1GB of data from Thailand's Supreme Court, in addition to targeting 14 Thai police websites in earlier operations.
The attackers publicly documented their actions through social media channels, posting a tweet with hashtags #TangoDown, #boycottthailand, and #KohTao to announce the prison website takedowns. Anonymous released a 37-minute video accusing Thai police of evidence fabrication and torturing suspects to obtain confessions in the Koh Tao case, while also listing historical allegations of similar misconduct by Thai authorities. The group framed their cyber campaign as a protest against Thailand's justice system, claiming the government prioritized maintaining a tourist-friendly international image over conducting fair investigations. No technical details regarding attack mitigation or restoration efforts were disclosed in available sources, nor were official responses from Thai authorities documented. The operational impact was limited to service disruption of prison websites, with no reported data breaches or system compromises beyond the temporary unavailability of web resources.