Cyber police are pursuing suspects who stole data to sell on the dark web. They traced IP addresses to raid target houses in two provinces, Phrae and Pathum Thani, detaining youths for interrogation. Important evidence was found, with plans to extend the investigation to accomplices.
Following the case where Mr. Patchara Anantasilp, Permanent Secretary of the Ministry of Digital Economy and Society (DES), assigned representatives to file a complaint for cyber police to investigate and apprehend the offenders, personal data leakage was traced to systems of the Department of Land Transport and the Department of Provincial Administration. Initially, suspicious IPs exhibited unusual data queries from three user accounts: Bangkok Noi district municipal officers, the Expressway Authority of Thailand, and the Surasi military force. Consequently, the Ministry of Transport temporarily suspended these accounts and coordinated with cyber police to review the accounts accessing sensitive personal data. They also instructed all agencies connected via the Department of Land Transport's e-Service system to reset all passwords to prevent further damage.
Later, Police Lieutenant General Surapol Prembutr, Commissioner of the Cyber Crime Investigation Bureau, ordered a special task force to handle this case. He assigned Police Major General Thinkorn Rangmat, Deputy Commissioner of the bureau, as head of the investigation team. The team summoned officials responsible for IT systems at both agencies for detailed questioning to trace the source and access routes.
Additionally, the investigation team discovered that the perpetrators did not directly breach the main databases but hacked authorized user accounts to access the system. Using these accounts, they extracted data and then displayed key personal information to prove its authenticity before selling it via the dark web, Telegram, or Discord.
Meanwhile, tracing the IP origins showed access from locations in Phrae and Pathum Thani provinces. Authorities gathered evidence and obtained warrants from the Criminal Court to search target residences at both locations. They summoned involved youths for interrogation, initially acquiring important information and seizing key IT evidence indicating involvement in the crime, aiming to find links to other associates.
The latest update on this matter was at 10:00 a.m. on 13 Aug 2026 at the meeting room of the Cyber Crime Investigation Division 1 (CCID1), Government Complex Chaeng Watthana, Lak Si, Bangkok. Police Major General Thinkorn Rangmat, Deputy Commissioner and head of the investigation team, and Police Major General Siriwat Deepo, Commander of CCID1, convened a meeting of investigators to review progress, lasting about one hour.
After the meeting, Police Major General Siriwat stated that the CCID held a meeting led by Deputy Commissioner Thinkorn Rangmat, involving all relevant investigation and inquiry personnel. They have already conducted searches at two locations, obtained substantial information, and seized computers for examination. Beyond these sites, they have identified other involved parties, including those who commissioned the crimes and key perpetrators, and the investigation is expanding. He emphasized that the agencies’ databases have not been breached; rather, offenders used individual authorized user accounts and passwords to access the data.
Police Major General Siriwat added that while rumors circulate about suspects being detained and devices seized for forensic examination, the volume of data requires time for scientific analysis. Those found involved will face legal action.
Regarding reports that the bureau invited a male juvenile suspect for discussion, he confirmed they follow criminal procedure laws. Although the suspect is a youth, the approach is conversational without detention. The two searched locations currently show no connections. He noted that such operations arise among enthusiasts who seek information, often sharing and exchanging data on platforms like Telegram or Discord to find user or password vulnerabilities. These are hobbyist groups rather than organized criminals.
In closing, Police Major General Siriwat urged parents, who may be unaware of their children’s activities, to caution them about potential legal consequences. More concerning are adults who encourage or incite children to commit such acts, which is highly inappropriate.