Thailand — Cyber Threat Profile
Thailand leaped to 7th place globally in the ITU 2024 Global Cybersecurity Index with a score of 99.22, achieving Tier 1 role model status. The National Cyber Security Agency (NCSA) declared 2025 the Year of Cybersecurity. In 2024 NCSA published mandatory security assessment guidelines for CII operators under the 2019 Cybersecurity Act. A strategic partnership with Google Cloud launched in April 2025 integrates Mandiant threat intelligence, Google Cloud Cybershield, and Web Risk into national government defense operations. Google Play Protect blocked over 6.6 million high-risk app installations targeting Thai users since 2024.- National CERT/CSIRT: ThaiCERT
- Data protection authority: Authority for the protection of Personal Data Information Commission (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.00 / 100, #32 worldwide
- Secure Internet servers per 1M people (2024): 3,150 (source: World Bank)
- Internet users (2024): 90.9% of population (source: World Bank)
Threat actors targeting Thailand
- AnonSecKh Hacktivist
- CeranaKeeper APT
- Mustang Panda APT
- Qilin Ransomware · 21 incident(s)
- The Gentlemen Ransomware · 18 incident(s)
- LockBit Ransomware · 14 incident(s)
- RansomHub Ransomware · 6 incident(s)
- KillSec Ransomware · 5 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- Gunra Ransomware · 3 incident(s)
- Krybit Ransomware · 3 incident(s)
- Lamashtu Ransomware · 3 incident(s)
- Lynx Ransomware Ransomware · 3 incident(s)
- NightSpire Ransomware · 3 incident(s)
- Stormous Hacktivist · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- DragonForce Ransomware · 2 incident(s)
- Fog Ransomware Ransomware · 2 incident(s)
- Medusa Ransomware Ransomware · 2 incident(s)
- Panzer Ransomware · 2 incident(s)
- Play Ransomware Ransomware · 2 incident(s)
- Akira Ransomware · 1 incident(s)
- Audit Team Ransomware · 1 incident(s)
- Cl0p Ransomware · 1 incident(s)
- Dire Wolf Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Majinahanashi Ransomware · 1 incident(s)
- RansomHouse Ransomware · 1 incident(s)
- World Leaks Ransomware · 1 incident(s)
- Dark Pink APT
- Earth Kurma APT
- Naikon APT
Most targeted sectors
- Manufacturing 18 incident(s)
- Business & Professional Services 11 incident(s)
- Transportation & Logistics 10 incident(s)
- Energy & Utilities 9 incident(s)
- Agriculture & Food 8 incident(s)
- Technology 7 incident(s)
- Government & Public Sector 6 incident(s)
- Retail & Consumer 6 incident(s)
- Hospitality & Tourism 5 incident(s)
- Education & Research 4 incident(s)
- Construction 2 incident(s)
- Healthcare 2 incident(s)
Recent claimed incidents
- KT RESTAURANT 2026-08-16 · Hospitality
- The Minor Food Group 2026-08-10 · Agriculture and Food Production
- Phithan Phanich 2026-08-09 · Manufacturing
- Siam Oil Product 2026-08-09 · Energy & Utilities
- Siam Stabilizers and Chemicals Co., Ltd. / SSC 2026-07-30 · Manufacturing
- Katathani Phuket Beach Resort 2026-07-27 · Hospitality
- Thai Seng International Co. Ltd 2026-07-27 · Manufacturing
- Comp Trading Co 2026-07-01 · Business Services
- Royal Thai Navy Housing Cooperative 2026-07-01 · Public Sector
- Lam Soon 2026-06-29 · Agriculture and Food Production
- Sivatel Bangkok 2026-06-21 · Telecommunication
- amc.co.th 2026-06-20 · Business Services
- Major Cineplex 2026-06-20 · Hospitality and Tourism
- saico.co.th 2026-06-20 · Business Services
- Company 2026-06-20 · Manufacturing