Actor Claims 6.9 GB Bangkok Post Data Dump Includes 822,140 Member Records

Summary
Actor d00101 claims a 6.9 GB dump linked to Bangkok Post contains 822,140 member records, employee data and infrastructure material. The listing and its claims have not been independently verified.
Key points
- Actor d00101 claims the dump contains 822,140 member records, 385 employee records and 49,783 files.
- The listing claims the material includes member databases, CMS data, an MSSQL HR system, Active Directory-related material and host filesystems.
- The actor also claims the dump includes cloud-tenant data, password hashes and TLS private-key material.
- The listing references nine internal hosts and 352 database tables; the report says sample records and infrastructure details were visible in a supplied screenshot.
- The report has not independently verified the breach, data contents, counts, extraction size or current availability of the material.
Article Details
- Victim Organization
- Bangkok Post
- Victim Domain
- bangkokpost[.]com
- Incident Type
- Unverified data breach and data-exposure claim
- Disclosure Date
- 2026-10-30
- Data Types Exposed
- Member account records
- Employee records
- Password hashes
- CMS data
- HR system data
- Active Directory-related material
- Host filesystem data
- Cloud-tenant data
- TLS private-key material
- Affected Records
- The actor claims 822,140 member records and 385 employee records; unverified.
- Affected Data Size
- 6.9 GB claimed; unverified.
- Operational Impact
- No operational disruption is reported. Potential consequences are described conditionally because the exposure claim has not been verified.
- Ransom Or Extortion
- Unknown
- Claim Status
- claimed
MITRE ATT&CK
T1005 · Data from Local SystemThe article maps the actor's unverified claim that host filesystems and server-side material were included in the dump to Data from Local System; this mapping is identified as inferred.T1213.006 · DatabasesThe article maps the actor's unverified claim that member, HR, and application database material was included in the dump to Data from Information Repositories: Databases; this mapping is identified as inferred.
