Thai University Central Admission System

The Thai University Central Admission System, also known as Thai UCAS or TUCAS, operates Thailand's centralised platform for university admissions. Its core function involves processing applications and managing admissions data for students seeking entry into higher education institutions across the country. This system handles highly sensitive personal information submitted by applicants nationwide as part of the university entrance process. The scale of its operations is inherently national, serving students applying to universities throughout Thailand. Its role places it at the critical intersection of education administration and personal data management for a significant portion of the Thai youth population annually.

TUCAS distinguishes itself through its centralised management of vast amounts of sensitive applicant data, including academic grades and national identity card details, which are essential for university selection decisions. This responsibility necessitates handling critical personally identifiable information for thousands of individuals each admissions cycle. A significant cyberattack on February 4, 2022, compromised the system, resulting in the theft of personal data belonging to more than 23,000 students. The Council of University Presidents of Thailand verified the unauthorised access and data exfiltration, confirming the exposure of names, academic grades, and national identity card details from university entrance examinations. This breach underscored the organisation's critical role and the sensitivity of the data it processes, as the stolen information appeared for sale on dark web platforms, posing substantial risks of identity fraud and other malicious activities against affected students.