Bangchak oil and gas company reports data breach, Thailand's privacy regulator launches Investigation
Learn More
Bangchak, a major Thai oil and gas company, has experienced a significant data breach affecting approximately 6.5 million customer records.
According to Bangchak's report to the regulatory authorities, unauthorized access to the company's customer feedback system was detected on April 9th. The company claims to have taken immediate action by blocking the unauthorized access to prevent further breaches and mitigate ongoing damage.
Bangchak Group has begun notifying affected customers via SMS about the data breach. The initial communication lacked specific details about the type and scope of data exposed. According to the SMS message, the company stated that no sensitive data or financial transaction information was compromised. The message also advised customers to avoid clicking suspicious links, not share OTP codes with others, and be cautious of anyone impersonating the company for transactions.
For those seeking additional information, Bangchak has provided a customer service number (1651, press 4) available from 8:00 AM to 9:00 PM local time.
No details are disclosed about the nature of the attack or number of affected individuals.
The Personal Data Protection Committee Office (PDPC) of Thailand confirmed it has launched an investigation into this security incident after being notified by Bangchak on April 11th, 2025.
The PDPC has instructed Bangchak to conduct an internal review of the incident and provide a detailed report covering root cause analysis of the security breach, the exact nature of the compromised data, potential impact on affected customers and risk assessment outlining preventive measures for future incidents
