Srikrung Broker Co.

Srikrung Broker Co. operates as an insurance brokerage firm headquartered in Thailand. The company acts as an intermediary, connecting clients with various insurance providers to facilitate policy placement. In addition to traditional brokerage services, Srikrung Broker Co. also manages a related insurance marketplace platform. Through this marketplace, the organisation enables agents and customers to access a range of insurance products and associated information. Its core activities are focused on the Thai insurance market, serving both individual consumers and corporate clients.

On July 28, 2022, Srikrung Broker Co. experienced a security breach that exposed approximately 369 gigabytes of data. The compromised dataset included roughly 3.28 million customer records and 462,980 agent records. Following the initial intrusion, threat actors proceeded to infiltrate a related insurance marketplace operated under the same organisational umbrella. During this secondary incursion, the attackers exfiltrated an additional 1.75 terabytes of sensitive documents. The stolen material comprised scanned identification copies, loan information, and other confidential files.

As an insurance broker, Srikrung Broker Co. specializes in risk assessment and policy placement rather than underwriting. Its involvement in both brokerage and marketplace functions distinguishes it from firms that focus solely on one side of the insurance value chain. The breach incident highlighted the organisation's handling of large volumes of personal and financial data, underscoring its data stewardship responsibilities. The event was reported as part of a broader trend of cyberattacks targeting Thai entities during the same period. Details of the breach, including data samples, were subsequently posted on hacking forums, where the attackers offered the information for sale or distribution.