People’s Party: People’s Party apologises for breach of members’ data

People’s Party Apologizes After Data Breach Exposes Members’ Personal Information

The People’s Party, a political organization in Thailand, has issued an apology following a data breach that compromised the personal information of its members. The incident, detected on February 23, exposed sensitive data used in membership applications, including names, family names, national ID numbers, addresses, birthdates, phone numbers, email addresses, and document images.

While the party stated that the breach did not affect passwords, complaint systems, or donation platforms, it confirmed that laser ID codes unique alphanumeric identifiers on Thai national ID cards were among the exposed data. These codes can be used for identity verification in financial and official transactions, increasing the risk of identity theft and scams.

With over 100,000 members, the party has since taken remedial steps, including notifying affected individuals and updating data protection authorities. Members were advised to monitor financial transactions, check credit records, and change passwords to mitigate potential fraud. The party also warned of possible phishing attempts by scammers posing as party representatives.

In a Facebook statement, the People’s Party acknowledged the severity of the breach, emphasizing its commitment to data protection and member trust. The incident underscores the risks of handling sensitive personal information, particularly in political organizations.

Source: https://www.bangkokpost.com/thailand/politics/3215488/peoples-party-apologises-for-breach-of-members-data

People's Party cybersecurity rating report: https://www.rankiteo.com/company/peoplesparty-thailand

"id": "PEO1773326213",
"linkid": "peoplesparty-thailand",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '100,000 members',
                        'industry': 'Politics',
                        'location': 'Thailand',
                        'name': 'People’s Party',
                        'type': 'Political Organization'}],
 'customer_advisories': 'Members advised to monitor financial transactions, '
                        'check credit records, change passwords, and be '
                        'cautious of phishing attempts',
 'data_breach': {'file_types_exposed': ['Document images'],
                 'number_of_records_exposed': '100,000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Family names',
                                              'National ID numbers',
                                              'Addresses',
                                              'Birthdates',
                                              'Phone numbers',
                                              'Email addresses',
                                              'Document images',
                                              'Laser ID codes']},
 'date_detected': '2024-02-23',
 'description': 'The People’s Party, a political organization in Thailand, '
                'issued an apology following a data breach that compromised '
                'the personal information of its members. The incident exposed '
                'sensitive data used in membership applications, including '
                'names, family names, national ID numbers, addresses, '
                'birthdates, phone numbers, email addresses, and document '
                'images. The breach did not affect passwords, complaint '
                'systems, or donation platforms but included laser ID codes, '
                'increasing the risk of identity theft and scams.',
 'impact': {'brand_reputation_impact': 'Significant',
            'data_compromised': 'Personal information of members, including '
                                'names, family names, national ID numbers, '
                                'addresses, birthdates, phone numbers, email '
                                'addresses, document images, and laser ID '
                                'codes',
            'identity_theft_risk': 'High',
            'systems_affected': 'Membership application database'},
 'recommendations': 'Members advised to monitor financial transactions, check '
                    'credit records, change passwords, and be wary of phishing '
                    'attempts',
 'references': [{'source': 'News Article'}],
 'regulatory_compliance': {'regulatory_notifications': 'Data protection '
                                                       'authorities updated'},
 'response': {'communication_strategy': 'Facebook statement acknowledging the '
                                        'breach and commitment to data '
                                        'protection',
              'containment_measures': 'Notified affected individuals, updated '
                                      'data protection authorities',
              'remediation_measures': 'Advised members to monitor financial '
                                      'transactions, check credit records, and '
                                      'change passwords'},
 'title': 'People’s Party Data Breach Exposes Members’ Personal Information',
 'type': 'Data Breach'}