3BB

3BB operates as a fixed broadband provider headquartered in Thailand. The company delivers wired internet connectivity services to residential and business customers across the country. Its core offering consists of broadband access that enables high‑speed data transmission for households and enterprises. By focusing on fixed‑line infrastructure, 3BB serves the Thai market where demand for reliable internet access continues to grow. The organization’s headquarters in Thailand situates it within the regional telecommunications landscape. As a provider of fixed broadband, 3BB competes with other telecom operators that offer similar connectivity solutions.

The scale of 3BB’s customer base became evident during a data breach disclosed on 1 November 2020. Threat actor ALTDOS exfiltrated approximately eight million customer records, which included names, identification card numbers, passwords and bank details. This figure indicates that the provider serves a substantial number of subscribers in Thailand. In addition to the primary breach, the attackers subsequently compromised a subsidiary named MONO, extracting hundreds of gigabytes of corporate and employee data such as HR records and resumes. The ransom demand escalated to 1.5 million USD after initial negotiations failed, and portions of the stolen data were leaked publicly. The incident highlighted the volume of information that 3BB and its subsidiary manage, underscoring the potential impact of a security failure on a large user base.

Distinguishing attributes of 3BB stem from its specialization in fixed‑line broadband delivery within Thailand’s telecommunications sector. The breach revealed shortcomings in security controls and communication practices, pointing to areas where the operator could improve its defensive posture. The exposure of systemic vulnerabilities raised potential regulatory concerns under Thailand’s data protection legislation. MONO, identified as a subsidiary of 3BB, appears to handle corporate and employee information, suggesting a diversified business scope beyond pure connectivity. The parent company’s response, which included downplaying the severity of the incident, reflects a particular approach to crisis communication. These facts portray 3BB as a major fixed broadband provider whose scale and security challenges are shaped by both its market position and internal governance.