According to The Nation, citing Thailand's personal data protection regulator, Bangchak discovered unauthorized access to its customer feedback system on April 9, 2025 [1]. The company reported that the incident involved approximately 6.5 million records and that unauthorized access had been blocked [1]. The regulator launched an investigation requiring the company to provide details on affected data, root cause, and risk assessment; the number of records should not be equated with a verified count of unique individuals [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Apr 12, 2025 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
Thailand's Bangchak Customer Feedback System Suffers Unauthorized Access
1 min read
- Disclosed
- Apr 12, 2025
- Occurred
- Apr 9, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Energy
What to do nowOur advice
The regulator launched an investigation requiring the company to provide details on affected data, root cause, and risk assessment; the number of records should not be equated with a verified count of unique individuals [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
The regulator launched an investigation requiring the company to provide details on affected data, root cause, and risk assessment; the number of records should not be equated with a verified count of unique individuals [1].
Source excerpt: "The oil firm has been asked to provide a comprehensive report detailing the nature of the compromised data, the potential impact on customers, the root cause of the breach, and a risk assessment outlining measures to prevent similar incidents in the future." [1].
References
Media1
- [1]
“The oil firm has been asked to provide a comprehensive report detailing the nature of the compromised data, the potential impact on customers, the root cause of the breach, and a risk assessment outlining measures to prevent similar incidents in the future.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.