Cyber police are rushing to hunt down the TSD data hacker, revealing that persons of interest have already been identified and are being investigated before a formal press conference is held. Investors are warned to be on guard against fraudsters using real data to deceive them.
The Cyber Crime Investigation Bureau (CCIB) is pressing ahead with coordination between Thailand Securities Depository Co., Ltd. (TSD) and cybersecurity agencies to urgently investigate and track down the perpetrators behind the unauthorized access to TSD's data, while gathering evidence both domestically and abroad in order to pursue full legal action.
Police Lieutenant Colonel Phakrit Krittayaphong, an inspector with the Cyber Security Unit of the Technology Crime Examination and Analysis Division (TCEAD), disclosed that officers have now been able to identify the individuals involved in the incident, but that the investigation and evidence-gathering process is still ongoing. Once clear details are available, an official press conference will be held.
Pol. Lt. Col. Phakrit said that following the personal data leak, the most concerning risk is that fraudsters may use victims' genuine data to build credibility for their deception — potentially sending messages with fake links, making phone calls while impersonating government officials, financial institutions, securities companies, or related agencies, and employing call-center gang tactics armed with detailed information about the victims in order to make it easier to manipulate them into falling for the scam.
"Nowadays, fraudsters come in every form. The most important thing is for the public to stay alert and not be quick to believe information or claims made to them. Always verify information carefully before taking any action — this will help reduce the risk of becoming a victim," Pol. Lt. Col. Phakrit said.
He also noted that cyber police and TSD are working closely together, both to expedite the pursuit and prosecution of the offenders and to prevent the public from falling victim to various forms of crime exploiting the leaked data.
In addition, the CCIB clarified that current fraud schemes do not rely solely on technology, but also employ psychological attack methods — known as social engineering — using accurate personal information to establish credibility, causing victims to believe the person contacting them is a genuine official, before tricking them into clicking links, downloading programs, or disclosing additional sensitive information, which can lead to both financial and personal data losses.
Cyber police therefore urge the public and investors to exercise heightened caution. If contacted by someone who references their personal information, they should not rush to believe or comply immediately, but should instead verify through official channels with the relevant agency every time, in order to protect themselves from fraudsters who may be seeking to exploit this data breach.
