Thai governmental job portal

Theorganisation operates as a Thai governmental job portal that provides an online platform for advertising and applying to public sector positions. Its headquarters are situated in Thailand, reflecting its national scope and alignment with domestic government services. The portal serves a diverse audience that includes government officials seeking internal transfers, private‑sector candidates looking for civil‑service roles, and various ministries that post vacancies. Through the system users can submit personal information such as full names, telephone numbers, email addresses, bank account details and payment information, while the portal also stores encrypted passwords for account security. In addition to basic contact data, the system records details of company applications and employment histories that are relevant to the recruitment process. On 10 January 2017, the portal experienced a security incident in which the hacktivist collective Anonymous obtained and released a portion of its stored data. The disclosed material comprised officials’ and job seekers’ names, company application records, payment data, phone numbers, bank account information, email addresses and encrypted passwords.

The breach impacted several government bodies, with particular mention of the Revenue Department and the Ministry of Foreign Affairs as examples of departments whose data appeared in the leak. Although the attackers chose to withhold certain identifiers such as national ID numbers, residential addresses and family‑related information in an effort to limit potential harm to individuals. The group stated that the motivation behind the release was opposition to a proposed internet surveillance law, framing the action as part of a broader protest against state monitoring measures. This incident was linked to the ongoing OpSingleGateway campaign, which Anonymous had been conducting against Thai state entities since 2015. After the theft, the stolen dataset was made publicly accessible on dark‑web forums, allowing anyone with the appropriate tools to download the leaked files. Despite the public release, the attackers claimed that the disclosed portion represented only roughly one percent of the total data they had exfiltrated from the portal. The episode highlighted the sensitivity of the information handled by the portal and underscored the challenges faced by government‑run online services in protecting personal data against determined adversaries.