60 Million Leaked Thai Logins and Fake Traffic-Fine Texts: A Household Checklist

อ่านภาษาไทย

Two Warnings in Five Weeks

On 9 August 2026, Digital Economy and Society Minister Chaichanok Chidchob said about 60 million more Thai-linked login records had piled up on dark-web markets over the past year. He also said the total number of Thai-linked login records on those markets is now larger than Thailand's population. These are records, not 60 million separate people. Many are old, repeated, or belong to the same person. Even so, it is very likely that at least one password used in your home is on one of those lists.

The minister was speaking after personal records of the Prime Minister and several Cabinet ministers, including ID card photos, circulated online. Early findings said the systems were not hacked directly. Instead, people bought stolen usernames and passwords and simply logged in. His advice to the public was simple: change the passwords for your email and other accounts now.

Then on 13 September 2026, deputy government spokeswoman Ploythalay Laksameesaengjan warned drivers about fake SMS messages that claim to be from the Royal Thai Police and say you have an unpaid traffic fine. The short link opens a fake site made to look like the e-ticket system. It may show a ticket number, a registration number, an offence and an amount so it looks real, and then asks for your personal details and card number.

What the Police Actually Say

• The Royal Thai Police do not ask you to pay traffic fines through SMS links or QR codes.
• Do not click the link, scan the code, or type in personal or card details, especially when the message rushes you or threatens legal action.
• Check and pay fines only through official channels: the Thang Rath app, the Police Care app, or ptm.police.go.th/eTicket, which you type in yourself.
• If you are unsure about a message, or think you have been scammed, call the AOC hotline 1441.

A 15-Minute Household Checklist

1. Change your email password first. Your email can reset every other account, so it is the most valuable password you have.
2. Stop reusing passwords. If one leaked password also opens your banking, LINE or shopping accounts, change those too. A password manager makes this easy.
3. Turn on two-step verification for email, LINE, Facebook and anything linked to money.
4. Treat every "pay now" SMS as fake until you have checked it in the official app yourself. Show this to older family members, who are often targeted.
5. Deal with the old devices in the drawer. See below.

Why Old Phones and Laptops Matter Here

A large share of leaked logins are collected by password-stealing malware on ordinary home and office computers, then sold on. The same saved passwords, browser sessions and autofill card details also sit on the old phone or laptop you no longer use. When that device is sold, passed on or thrown away without a proper wipe, everything on it can go with it. A factory reset is not enough to guarantee the data cannot be recovered.

Before an old device leaves your home, sign out of your accounts, remove it from your Google or Apple account, and then have it wiped properly. We do a certified phone and tablet data wipe and laptop data wipe, either returning the device clean or destroying it, with a certificate for each one.

How We Help Households

Our personal data wipe service covers phones, tablets, laptops, desktops and loose hard drives. Ship your devices to us from anywhere in Thailand, or book a pickup in Bangkok. If you do not want a working device back, we can give it free to someone who needs one.

Get an instant quote or call 082-797-3702.

Sources: Nation Thailand, 9 August 2026; Bangkok Post, 13 September 2026.