( November 11, 2026, 03:54 GMT | Official Statement) -- MLex Summary: Thailand's Personal Data Protection Committee on Wednesday said it is investigating a cyberattack on Thai Airways International after an unauthorized party used an account to access passenger booking data belonging to 65,029 people, according to a report from reservation technology provider Amadeus. The airline, acting as a data controller under the Personal Data Protection Act, cut off the unauthorized access, reset passwords and systems, and notified the PDPC within the statutory 72-hour period. The regulator has ordered Thai Airways to submit electronic forensic-investigation findings to establish the cause of the breach, details of notifications and protective guidance provided to affected passengers, and an assessment of strengthened security measures to prevent similar incidents.Statement follows (in Thai)....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.