Social Security Office Warns Against Misuse of Personal Information on e-Self Service System

Bangkok: The Social Security Office (SSO) has issued a warning regarding the use of another person's information to register on its e-self service system, emphasizing that such actions violate the Computer Crime Act. The office has clarified that its data remains secure and has not been compromised.

According to Thai News Agency, the incident that has been widely discussed on social media involved the registration for the e-self service system, where an image and personal information of Prime Minister Anutin Charnvirakul were disclosed. An investigation revealed that the breach occurred when someone used a national identification number to register on the system while entering another person's email address and phone number, subsequently sharing the screenshots online.

The Social Security Office has confirmed that its systems were not hacked, and there was no data leak from its database. The issue arose from unauthorized use of personal data, which constitutes a legal violation under the Computer Crime Act and the Personal Data Protection Act (PDPA). The office has taken legal action against the individuals involved and has informed the National Cyber Security Agency.

To enhance security, the SSO will require all users to log in using their ThaID from April 2, 2026, for access to the e-self service system. The office is considering alternative identity verification methods to accommodate users who face challenges with technology, such as the elderly and disabled. Coordination is ongoing with the Digital Government Development Agency to improve public access to the system.

The SSO highlighted the importance of vigilance on social media, as Section 14 of the Computer Crime Act B.E. 2560 (2017) outlines penalties for introducing false information into a computer system. Offenders may face up to 5 years of imprisonment or a fine of up to 100,000 baht, with increased penalties for widespread impact.

The Social Security Office urges the public to report unauthorized dissemination of personal information to authorities or relevant platforms. Individuals should avoid forwarding such information and should keep evidence like screenshots for reporting. Regular monitoring of personal information usage and cautious online behavior are also advised to prevent potential harm.