Thailand — Cyber Threat Profile
Thailand leaped to 7th place globally in the ITU 2024 Global Cybersecurity Index with a score of 99.22, achieving Tier 1 role model status. The National Cyber Security Agency (NCSA) declared 2025 the Year of Cybersecurity. In 2024 NCSA published mandatory security assessment guidelines for CII operators under the 2019 Cybersecurity Act. A strategic partnership with Google Cloud launched in April 2025 integrates Mandiant threat intelligence, Google Cloud Cybershield, and Web Risk into national government defense operations. Google Play Protect blocked over 6.6 million high-risk app installations targeting Thai users since 2024.- National CERT/CSIRT: ThaiCERT
- Data protection authority: Authority for the protection of Personal Data Information Commission (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.00 / 100, #32 worldwide
- Secure Internet servers per 1M people (2024): 3,150 (source: World Bank)
- Internet users (2024): 90.9% of population (source: World Bank)
Threat actors targeting Thailand
- AnonSecKh Hacktivist
- CeranaKeeper APT
- Mustang Panda APT
- The Gentlemen Ransomware · 23 incident(s)
- Qilin Ransomware · 21 incident(s)
- LockBit Ransomware · 14 incident(s)
- Krybit Ransomware · 6 incident(s)
- RansomHub Ransomware · 6 incident(s)
- INC Ransom Ransomware · 5 incident(s)
- KillSec Ransomware · 5 incident(s)
- Lynx Ransomware Ransomware · 4 incident(s)
- DragonForce Ransomware · 3 incident(s)
- Gunra Ransomware · 3 incident(s)
- Lamashtu Ransomware · 3 incident(s)
- NightSpire Ransomware · 3 incident(s)
- Stormous Hacktivist · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- Dire Wolf Ransomware · 2 incident(s)
- Fog Ransomware Ransomware · 2 incident(s)
- Medusa Ransomware Ransomware · 2 incident(s)
- Panzer Ransomware · 2 incident(s)
- Play Ransomware Ransomware · 2 incident(s)
- Akira Ransomware · 1 incident(s)
- Audit Team Ransomware · 1 incident(s)
- Cl0p Ransomware · 1 incident(s)
- Deadlock Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Majinahanashi Ransomware · 1 incident(s)
- MedusaLocker Ransomware · 1 incident(s)
- RansomHouse Ransomware · 1 incident(s)
- World Leaks Ransomware · 1 incident(s)
- Dark Pink APT
- Earth Kurma APT
- Naikon APT
Most targeted sectors
- Manufacturing 27 incident(s)
- Business & Professional Services 15 incident(s)
- Energy & Utilities 10 incident(s)
- Transportation & Logistics 10 incident(s)
- Agriculture & Food 8 incident(s)
- Retail & Consumer 8 incident(s)
- Technology 8 incident(s)
- Government & Public Sector 7 incident(s)
- Hospitality & Tourism 6 incident(s)
- Education & Research 5 incident(s)
- Construction 4 incident(s)
- Healthcare 2 incident(s)
Recent claimed incidents
- PTT Oil and Retail Business 2026-09-02 · Energy & Utilities
- Orex Trading Co., Ltd. 2026-09-01 · Other
- Thai Film Industries PCL 2026-08-30 · Other
- SUNSEA 2026-08-30 · Other
- Jgsee 2026-08-27
- Syscon (Thailand) Co., Ltd. 2026-08-26 · Technology
- BANGKOKCABLE 2026-08-19 · Manufacturing
- Sunsea Plastics P.S. Co., Ltd. 2026-08-19 · Other
- KT RESTAURANT 2026-08-16 · Hospitality
- The Minor Food Group 2026-08-10 · Agriculture and Food Production
- Phithan Phanich 2026-08-09 · Manufacturing
- Siam Oil Product 2026-08-09 · Energy & Utilities
- Siam Stabilizers and Chemicals Co., Ltd. / SSC 2026-07-30 · Manufacturing
- Thai Seng International Co. Ltd 2026-07-27 · Manufacturing
- Katathani Phuket Beach Resort 2026-07-27 · Hospitality