"Social Security Office" warns using others' personal data to register for the e-self service system constitutes an offense under the Computer Crime Act, and confirms that the data has not been hacked.
Regarding the social media incident involving the registration for the e-self service system via the electronic service platform, which showed images and personal data of Prime Minister Anutin Charnvirakul,
the Social Security Office investigated and found that the case involved using someone else's national ID number to register on the office's e-self service website, entering another person's email and phone number, then sharing screenshots on social media.
The Social Security Office clarifies that its system was not hacked, and no data leakage occurred from its database. The incident involved unauthorized use of personal data, which is illegal when using publicly available personal information online for improper purposes. Such acts violate personal data privacy and involve public disclosure of confidential information, damaging the office as the data custodian under the Computer Crime Act and the Personal Data Protection Act (PDPA).
The Social Security Office has filed legal complaints against the offenders to the fullest extent and has also reported the matter to the National Cybersecurity Agency.
As a preventive measure, the office has enhanced access security for the e-self service system. From 2 Apr 2026 GMT+7 onwards, all users—both existing and new insured persons—must log in through ThaiID on the Social Security Office's website.
However, recognizing access limitations for certain groups such as the elderly, disabled, and workers unfamiliar with app usage, the office is considering developing multiple identity verification methods to facilitate equal and convenient access for all, in coordination with the Digital Government Development Agency to improve system efficiency and coverage.
The office emphasizes the public should exercise caution when using social media, as Section 14 of the Computer Crime Act B.E. 2560 (2017) clearly prohibits inputting false information into computer systems, including presenting or disseminating distorted or fabricated data intended to deceive or cause harm to individuals or society, as well as spreading fake news that threatens national security and safety.
The law also covers forwarding such information, with violators facing penalties of up to five years imprisonment or fines up to 100,000 baht, or both. If the act causes widespread impact, penalties increase according to severity.
The Social Security Office requests cooperation from the public: if you find unauthorized sharing of your or others' personal data, immediately avoid forwarding it, collect evidence such as screenshots with date and time, then report to relevant authorities or police for legal action. You may also notify the platforms involved to promptly suspend or remove such content.
Additionally, individuals should regularly monitor their data usage and be cautious when providing personal information online to prevent potential future harm.