Association of Investment Management Companies Reports Data Breach Affecting 170 Users
The Association of Investment Management Companies (AIMC) in Thailand has confirmed a data leak involving 170 individuals, clarifying that the incident was not a direct hack of their database.
On November 9, 2026, the Association of Investment Management Companies (AIMC) announced that personal data belonging to 170 users had been compromised. The breach was identified following a notification from the National Cyber Security Agency on November 4, 2026. According to the AIMC, the leaked information includes names, dates of birth, national identification numbers, and phone numbers. The association clarified that the incident did not stem from a direct attack on their internal database. Instead, the leak was attributed to user-side vulnerabilities, specifically the use of web browsers that had saved login credentials or the installation of malware-infected software by individuals registering for training courses. Upon discovering the breach, the AIMC notified the 170 affected individuals via email on November 6, 2026, and advised them to update their credentials and enable OTP verification. A dedicated call center has been established to provide support. The association has also reported the incident to the Office of the Personal Data Protection Commission. For residents and users of such platforms, this incident serves as a reminder to practice secure browsing habits and avoid saving passwords on public or shared devices. It remains to be confirmed whether any further security vulnerabilities exist within the association's external training portals.
