Thai Airways Investigates Data Breach Affecting Over 65,000 Passengers

Thai Airways has officially notified the Office of the Personal Data Protection Commission (PDPC) regarding a cybersecurity breach that compromised the personal information of 65,029 passengers. According to Khaosod Online, the airline was alerted by its service provider, Amadeus, that an unauthorized party had gained access to booking accounts. Upon discovery, the airline took immediate action to terminate the unauthorized access and reset system passwords to secure the platform.

The PDPC confirmed that Thai Airways complied with reporting requirements by notifying the agency within 72 hours of the incident. Currently, the airline is conducting a deep-dive investigation to determine the full extent of the breach and assess potential risks to the affected individuals. The PDPC has instructed the airline to provide a comprehensive electronic report detailing the root cause, the notification plan for affected passengers, and the specific measures being implemented to upgrade data security protocols to prevent future occurrences.

For travelers and residents, this incident highlights the importance of monitoring personal accounts for suspicious activity. While the airline is working to identify the scope of the data exposure, it remains to be confirmed exactly what types of personal information were accessed and whether any financial data was involved. Passengers are advised to remain vigilant and await further official communication from Thai Airways regarding potential impacts on their specific booking records.