"Data of 106 Million Visitors to Thailand Breached"

Security researchers at Comparitech found an unprotected Elasticsearch database on August 22, 2021. Inside the 200GB digital index were records dating back ten years containing the personal details of more than 106 million international travelers who visited Thailand.  The information exposed in the publicly accessible database consisted of full names, arrival dates, gender, residency status, passport numbers, visa information, and Thai arrival card numbers. The researchers could not determine how long the data had been exposed before it was indexed by the search engine Censys on August 20, 2021. Thai authorities informed Comparitech that the exposed data was not accessed by any unauthorized parties.   While the IP address of the database is still public, the index has been replaced with a digital booby trap. Visitors to the IP address who attempt to access the now secured database are presented with the message: "This is honeypot, all access were logged [sic]." Before the Covid-19 pandemic affected travel, Thailand was a popular tourist destination, drawing nearly 40 million visitors in 2019 alone. 

Infosecurity reports: "Data of 106 Million Visitors to Thailand Breached"