Thailand's Personal Data Protection Commission (PDPC) has launched an urgent investigation into a major breach involving personal data and ID photos from government databases—including sensitive information on the PM, ministers, and senior officials—being leaked online. The breach appears to stem from unauthorized access via criminal networks. The PDPC is pursuing a three-pronged enforcement strategy: prosecuting those republishing data, tightening security at source agencies (Transport and Interior departments), and coordinating with law enforcement and the National Cybersecurity Agency to dismantle the criminal networks buying and selling access. This signals serious vulnerabilities in Thai government data infrastructure and increased regulatory scrutiny.