2026 Thailand Council of Engineers (COE) — ~350k engineers; migration-window exposure; scam warnings (Apr)
Data compromised
Professional engineer registry PII and credential metadata per Thai press narratives
Technical writeup
In mid–April 2026, Thai and regional press (e.g., The Thaiger, Bangkok Post–adjacent social summaries, Thai Enquirer threads) described a serious incident affecting the Council of Engineers Thailand during a COE Service 2 → 3 migration, with public commentary citing on the order of 300,000–350,000 professional members exposed and unusually high automated query volume (~680,000) against affected services. Former council leadership reportedly confirmed breach reality in media interviews and warned engineers about scam risk ahead of electronic election processes. Fields discussed included names, addresses, phones, and license-oriented professional metadata.
Root cause
Server migration / configuration weakness exploited; high-volume automated access per reporting