Unauthorised access on TSD portal

The SEC says personal information exposed in a data breach could potentially be exploited in phishing and social engineering scams. Investors should exercise caution when receiving emails, SMS messages or phone calls requesting personal, financial or account information.

The Securities and Exchange Commission (SEC) is monitoring Thailand Securities Depository Co (TSD) after the country's central securities depository detected unauthorised access to personal data stored on its TSD Investor Portal.Anek Yooyuen, deputy secretary-general and spokesman of the SEC, said the regulator received a preliminary incident report from TSD on July 26 after the company identified unauthorised access to its investor portal system.

"The SEC immediately coordinated with TSD to establish the facts, determine the root cause of the incident and ensure appropriate measures are implemented to prevent any further impact," Mr Anek said.

The SEC said TSD blocked access from suspicious sources and user accounts, disabled affected system connections and stepped up cybersecurity monitoring as part of its containment measures.