Thailand: Only 8.4% of Government Systems Support MFA Two Months After the August Password Leak, MP Says

Only 1,246 of 14,828 active Thai government information systems, about 8.4%, support multi-factor authentication, opposition MP Phawut Phongwitthayaphanu of the People's Party said at Parliament on 29 October. He attributed the figures to the National Cyber Security Agency (NCSA). Thai Post's report carries no response from the agency or the government.

After government data and passwords leaked in August, the government gave agencies 15 to 30 days to change passwords and upgrade MFA.

What the MP asked for

Phawut said more than 2,000 of the systems are high-risk and asked the government to secure those first, set a clear timetable for the more than 12,000 others and publish each agency's progress. A representative of the House digital affairs committee, speaking alongside him, told agencies to suspend user accounts they don't need and keep access logs that can be checked afterwards.

The same figures appear in the Daily News report from Parliament.

What NCSA said in August

In early August NCSA secretary-general Amorn Chomchoei wrote to the permanent secretaries of the ministries asking for urgent changes to critical systems, Prachachat reported on 9 August. The agency told the paper its logs showed no large attack or bulk data transfer, and that the access came through leaked passwords.