Security Knowledge
← Incident database

his-thailand-2025 · Disclosed 2026-10-07

HIS Thailand: file-server intrusion disclosed in 2026

Following detection in December 2025 and a file review, HIS disclosed possible exposure of passport and allergy data for up to 627 people in October 2026.

Cause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    Suspicious file-server access was confirmed; the entry mechanism is undisclosed.

    [s1]p.1 §1
  • Reported fact

    Passport and allergy data for up to 627 people may have been taken.

    [s1]p.1 §2

Timeline

  1. A detection alert prompted server isolation. [s1]

  2. Investigation identified passport data for up to 627 people. [s1]

  3. Public notice followed completion of the file review. [s1]

Reported response

  • Reported fact

    HIS isolated the server, restricted access, involved external experts, and reported to authorities.

    [s1]p.1 §1

Evidence relevant to prevention

Insufficient evidence

Inspect data purpose, retention deadlines, file inventories, permissions, and access logs.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

The intrusion start, completed exfiltration scope, and technical cause are undisclosed.

Sources

  1. [s1] エイチ・アイ・エス · Primary source

    子会社ファイルサーバへの不正アクセスによる個人情報流出の可能性に関するお知らせ ↗

    Published 2026-10-07 · Reviewed 2026-10-09