Thailand — Cyber Threat Profile
Thailand leaped to 7th place globally in the ITU 2024 Global Cybersecurity Index with a score of 99.22, achieving Tier 1 role model status. The National Cyber Security Agency (NCSA) declared 2025 the Year of Cybersecurity. In 2024 NCSA published mandatory security assessment guidelines for CII operators under the 2019 Cybersecurity Act. A strategic partnership with Google Cloud launched in April 2025 integrates Mandiant threat intelligence, Google Cloud Cybershield, and Web Risk into national government defense operations. Google Play Protect blocked over 6.6 million high-risk app installations targeting Thai users since 2024.- National CERT/CSIRT: ThaiCERT
- Data protection authority: Authority for the protection of Personal Data Information Commission (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.00 / 100, #32 worldwide
- Secure Internet servers per 1M people (2024): 3,150 (source: World Bank)
- Internet users (2024): 90.9% of population (source: World Bank)
Latest Thailand coverage
- Gentlemen gang puts Thai air force and museum on leak site 2026-10-17 · Cyber Incidents
Threat actors targeting Thailand
- AnonSecKh Hacktivist
- CeranaKeeper APT
- Mustang Panda APT
- The Gentlemen Ransomware · 28 incident(s)
- Qilin Ransomware · 24 incident(s)
- LockBit Ransomware · 15 incident(s)
- Krybit Ransomware · 6 incident(s)
- RansomHub Ransomware · 6 incident(s)
- INC Ransom Ransomware · 5 incident(s)
- KillSec Ransomware · 5 incident(s)
- NightSpire Ransomware · 5 incident(s)
- DragonForce Ransomware · 4 incident(s)
- Lynx Ransomware Ransomware · 4 incident(s)
- Gunra Ransomware · 3 incident(s)
- Lamashtu Ransomware · 3 incident(s)
- Stormous Hacktivist · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- Cl0p Ransomware · 2 incident(s)
- Dire Wolf Ransomware · 2 incident(s)
- DYSPHOR1A Ransomware · 2 incident(s)
- Fog Ransomware Ransomware · 2 incident(s)
- Medusa Ransomware Ransomware · 2 incident(s)
- Panzer Ransomware · 2 incident(s)
- Play Ransomware Ransomware · 2 incident(s)
- Akira Ransomware · 1 incident(s)
- Audit Team Ransomware · 1 incident(s)
- Deadlock Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Majinahanashi Ransomware · 1 incident(s)
- MedusaLocker Ransomware · 1 incident(s)
- RansomHouse Ransomware · 1 incident(s)
- World Leaks Ransomware · 1 incident(s)
- Dark Pink APT
- Earth Kurma APT
- Naikon APT
Most targeted sectors
- Manufacturing 29 incident(s)
- Business & Professional Services 15 incident(s)
- Transportation & Logistics 11 incident(s)
- Energy & Utilities 10 incident(s)
- Agriculture & Food 9 incident(s)
- Retail & Consumer 9 incident(s)
- Government & Public Sector 8 incident(s)
- Hospitality & Tourism 8 incident(s)
- Technology 8 incident(s)
- Education & Research 7 incident(s)
- Construction 4 incident(s)
- Financial Services 2 incident(s)
Recent claimed incidents
- Wellington College International School Bangkok 2026-10-17 · Education
- First Brothers Co., Ltd 2026-10-17 · Other
- Museum Siam 2026-10-16 · Hospitality
- Thai Ha PCL KASET 2026-10-16 · Agriculture and Food Production
- SKY CC Company Limited 2026-10-14 · Other
- Royal Thai Air Force 2026-10-10 · Government & Defense
- Sinae Phuket Luxury Hotel 2026-10-08 · Hospitality
- Thai Lion Air 2026-10-02 · Transportation
- Elite Industech Co., Ltd 2026-09-24 · Manufacturing
- DAD-CO.TH 2026-09-23 · Other
- ShopDunk 2026-09-20 · Retail & E-Commerce
- PTT Oil and Retail Business 2026-09-02 · Energy & Utilities
- Orex Trading Co., Ltd. 2026-09-01 · Other
- Thai Film Industries PCL 2026-08-30 · Other
- SUNSEA 2026-08-30 · Other