Thailand announces mandatory MFA plan for government systems after 60 million credentials exposed

August 13, 2026 at 03:02 AM1 min

This digest was compiled by AI from multiple sources — links to the originals are below.

Thailand's Digital Economy and Society Ministry announces it will seek cabinet approval to make multi-factor authentication mandatory across all government systems after roughly 60 million credential records surfaced on the dark web over the past year. The Interior Ministry attributes the leaks to criminals buying passwords from dark-web marketplaces and logging in through normal system APIs, not direct breaches. Authorities are carrying out mass password resets and deleting dormant accounts even as preliminary checks indicate no breach of the core database.

Mandatory MFA Plan

Thailand's Digital Economy and Society Minister is seeking cabinet approval to make multi-factor authentication mandatory across all government systems. The proposal follows roughly 60 million credential records appearing on the dark web in the past year, a number exceeding Thailand's population. The Interior Ministry is carrying out mass password resets and deleting dormant user accounts in response. Civil servants and the public have been urged to change passwords for various online services.

Dark Web Leak Investigation

The leaked data includes personal information linked to high-ranking officials and national ID card details, according to Thai authorities. Interior Ministry officials attribute the exposure to criminals buying passwords from dark-web marketplaces and logging in through normal system APIs, not direct breaches of government systems. Preliminary checks indicate the core civil registration database was not breached. Authorities have seized one server allegedly used for cross-checking stolen data and are pursuing legal action against those responsible. Thailand is also advancing its Digital ID 2.0 initiative and expanding its digital trust framework.