The Cabinet has upgraded data security after user account information was leaked, ordering 300 departments to change passwords promptly to establish standards comparable to international levels.
On 11 Aug 2026 GMT+7, Ms. Ratchada Thanadirek, spokesperson for the Prime Minister's Office, announced that the Cabinet approved measures to prevent personal data leaks caused by credential breaches, by implementing multi-factor authentication (MFA) such as Digital Identity (ThaID) or other secure methods, as proposed by the Cybersecurity Security Committee (CSC).
This is to systematically enhance personal data protection and reduce cyber threats in the public sector, building confidence among the public, businesses, and investors, and raising Thailand to international standards. The National Cybersecurity Security Committee Office (NCSC) was assigned to act under the Cybersecurity Act B.E. 2562 (2019 CE) to coordinate and respond to threats promptly.
The Prime Minister's Office spokesperson added that the Cabinet approved three key measures from the CSC meeting on 10 Aug 2026 GMT+7 as follows: Force Reset Password—mandating all civil servants and officials in over 300 government departments to immediately change passwords to prevent malicious use of leaked old data; System Cleansing—requiring all ministries and 300 departments to review over 30,000 IT systems within 15 days and permanently disable backend access to any old or abandoned systems, since many agencies have only closed front-end websites leaving backend systems vulnerable; and Nationwide MFA Implementation—mandating multi-factor authentication for all government IT systems to ensure maximum security.