Office of the Personal Data Protection Commission (PDPC) has launched an investigation into an advertisement on the ‘Dark Web’ offering 22 million sets of personal data, claimed to have been harvested from OPPO smartphones, for sale at US$20,000 (~ Bt680,000).
Pol Col Surapong Plengkham, director of inspection and supervision at the PDPC, told Thai PBS reporters today that they have recently discovered the advertisement. It had been posted by an anonymous person, using the pseudonym ‘SSL Dragon’, on December 17th last year.
He said that OPPO Thailand, the distributor of OPPO and Realme smartphones, has been informed of the data leaks and told to report back to the PDPC within 72 hours.
He said that the company must be held accountable and pay compensation if any of their smartphone owners show the authorities that their personal data was stolen or has been sold.
Meanwhile, Suwannee Jatsadasak, assistant governor of the Financial Institution Supervision Group of the Bank of Thailand, said that easy loan access by small borrowers has prompted many people to turn to applications on smartphones.
She said that the central bank has developed systems through which customers can choose to send their personal data to credible agencies for assessment of their incomes and ability to service their loans, so financial institutions can use the information when approving loans.
She added that the central bank has coordinated with other agencies to close down illegal applications, while the Thai Bankers Association has promised to upgrade their financial transaction safety systems.
