Hello Nation Thailand you been compromise 795 Employees in our hand
Nation Thailand's HR Stack, Laid Bare: 795 Employees, 7,765 Payslips, and 305 Plaintext Bank Accounts From One Open Directory
You have been compromise.
All your employee data is in our hand. Not some. All. 795 people. Every name, every email, every department, every boss they answer to. We have the whole tree.
Good luck explaining that one.
We not break anything. whole way, still same. We are nice. This time.
But we look. Oh, we look a lot.
7,765 payslip PDF. You think encrypted, so safe. It is a PIN. One PIN per person. Small PIN. We try 34, 29 open. 29 from 34. No lockout. No limit. No waiting. Just try, try, try, open. So now 7,765 "encrypted" file is not encrypted file. Is text. Is number. Is ours.
Then we read them. 305 row. Salary. Deduction. Net pay. Bank account number. Real bank account number. Plaintext. Not even hidden. Not behind anything. Just there, waiting, like gift.
And 2,580 income tax certificate. Three year. 2566, 2567, 2568. Every employee. 1.1 GB of tax paper nobody outside should see.
We take the rest too while we standing there:
14,756 vendor. 28,716 material. 29,997 budget line. 129 memo approval, deploy note, all the internal talk. Org chart, BU, AMS rate card. 61 PV document, sequential ID, no login needed. Welfare claim, receipt scan, all of it. Vendor list, material list, budget list your whole procurement life on a plate.
