High-ranking TrueMove executive suggests legal action against man who discovered data leak
This comes as the Thailand regulatory agency ordered TrueMove to create an impact assessment and compensation packages for victims of the data leak
TrueMoveH, Thailand’s second-largest regulator, was ordered by the country’s regulatory agency to create an impact assessment and compensation package for those impacted by the revelations of a major data leak last weekend, according to the Bangkok Post.
Furthermore, Takorn Tanthasit the Secretary General of the National Broadcasting and Telecommunications Commission (NBTC) would not commit to whether or not True will be punished further. He said the agency needs to complete a full official investigation.
The biggest surprise came from Pakpong Pattanamas, the Deputy Director of Mobile Business at True, who said the company might take legal action against Niall Merrigan for hacking the system. He is quoted by the Bangkok Post as saying Merrigan used “special tools” to access data he had no right to see.
Also Read: Data leak from Thailand telco reveals passport, ID card information
Merrigan is the man who discovered the leak and is a security expert based in Norway. According to Merrigan’s blog post, the information was public facing and could be accessed by anyone who knew where to look.
Merrigan posted a couple of tweets in reference to the legal threats from True.
Some days are more stressful than others.. today is one of those days
— Niall Merrigan (@nmerrigan) April 17, 2018
So all of Thailand goes to sleep about now..my Twitter stream dies down for a bit. Thanks for all the messages of support ขอขอบคุณ
— Niall Merrigan (@nmerrigan) April 18, 2018
One of the issues at hand is the data leak appears to be due to carelessness within the organization, rather than an external hack. Additionally, it took over a month — and the imminent publishing of a news article — for True to take action.
Merrigan was able to access 32 gigabytes of data which corresponds to 46,000 files covering 11,400 customers. Some of the information included scanned National ID cards, a piece of information that can be used wreak havoc on someone’s identity.
Also Read: We want to hear from you! Take the 2-minute e27 survey to help us improve
For what it is worth, the True stock price has been completely unaffected.
—
Copyright: john6863373 / 123RF Stock Photo
The post High-ranking TrueMove executive suggests legal action against man who discovered data leak appeared first on e27.
