According to The Record, citing confirmation from the Permanent Secretary of Thailand's Ministry of Labour, the ministry's website was compromised and defaced before being briefly taken offline and restored [1]. The ministry stated that it removed the injected text, restored from backups, changed passwords, and ordered an investigation [1]. Officials denied that data servers were breached; therefore, this entry does not adopt the attacker's claims of data theft or mass device encryption [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Jul 17, 2025 and we added it on Nov 10, 2026. It is not a new event.
MediumMonitoringBackfillMedia reported
Thailand's Ministry of Labour Confirms Official Website Defacement and Restores Service
1 min read
- Disclosed
- Jul 17, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government
What to do nowOur advice
Officials denied that data servers were breached; therefore, this entry does not adopt the attacker's claims of data theft or mass device encryption [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
Officials denied that data servers were breached; therefore, this entry does not adopt the attacker's claims of data theft or mass device encryption [1].
Source excerpt: "Researchers from cybersecurity firm Cyble published a report in June saying Devman claimed 13 victims in May, making it one of the leading gangs that month. It took credit for an attack on Philippines news outlet GMA and has attacked multiple companies across Thailand since emerging." [1].
References
Media1
- [1]
“Researchers from cybersecurity firm Cyble published a report in June saying Devman claimed 13 victims in May, making it one of the leading ransomware gangs that month. It took credit for an attack on Philippines news outlet GMA and has attacked multiple companies across Thailand since emerging.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.