Immigration website leaks expats personal details

[HHTel]

Personal details of hundreds of expats living in the southern province of Nakhon Si Thammarat were laid bare to the internet for hours last night thanks to the weak security of a police immigration website.

Openly available to anyone who visited the site were names, nationalities, passport numbers, professions and home addresses of foreign residents, showing where they all resided on an interactive map. The site, since taken offline, was supposed to be a test of an internal police database under development, according to an immigration police commander.

“It was a demo, we were testing it,” Maj. Gen. Thanusilpa Duangkaewngam, the officer in charge of the provincial immigration bureau, said by telephone.

The information was accessible at http://www.adsum.in.th/index.php to any internet user without need of a password. Attention to it appears to have first come from former Thailand-based journalist Andrew MacGregor Marshall, who shared it via Facebook on Sunday night to warn foreigners living in the province.

“If you are a foreigner living in southern Thailand – including Phuket and Samui – you need to take urgent steps to protect yourself,” wrote Marshall, who is wanted by Thai authorities for his critical writing about the monarchy.

Further underscoring the vulnerability of the site, some internet users also correctly guessed the password to enter the website’s management system: 123456.

It was unclear how long the site had been online. The website administrator took down the site at around 2am, according to digital advocacy group Thai Netizens. It also identified the website developer as a firm called Youngcyber Digital Technology, which is headed by a man named Akram Aleeming. The website for the firm was offline Monday.

Source: http://www.khaosodenglish.com/detail.ph ... 1459141534

[buksida]

Sensitive info about tourists revealed in 2nd online data leak
ANOTHER data leak involving foreigners in Thailand has apparently been uncovered barely a week after sensitive personal information of foreigners living in the country’s southern provinces was revealed to have been to be hidden in plain sight.

This time the details of the foreign travelers, including their most recent vaccine shots, real names, nationalities, passport and flight numbers, and addresses in Thailand, among others, were made available on a government-sanctioned website.

A local media outlet reported that the website was operated by the Bureau of General Communicable Diseases, that displayed records of foreign travelers who passed through health checkpoints at Thai border controls, covering both air and land gateways.

https://asiancorrespondent.com/2016/03/ ... data-leak/

[Spitfire]

This one deserves the label "Way-to-go morons" and just smacks of digital incompetence....which Thai bureaucracy is notorious for. Just the latest case of embarrassing ineptitude for the authorities.

[Bristolian]

Maybe a good reason for not using the online 90 days reporting. Nhaaa that doesn't work most of the time anyway your bank details and incomes are safe