Banco de dados de usuários da Universidade de… · Breach

Actor Claims Sale of 81,705 Chulalongkorn University User Records

Oct 27, 2026 · 1 min read

A threat actor on an underground forum claims to sell 81,705 JSON records of Chulalongkorn University users in Thailand, with names, national ID card numbers, full addresses and phone numbers, for $1,000 with escrow. The claim has not been independently verified and the university has not confirmed an incident, according to DailyDarkWeb. Affiliated people should watch for scams using this data, such as SIM-swap and loan fraud.

By HIFY Radar newsroom Updated 10/27/2026 02:01 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on an underground forum claims to sell 81,705 user records from Chulalongkorn University in Thailand, containing names, national ID card numbers, full addresses and phone numbers, for $1,000 with escrow. The university has not confirmed an incident and the claim has not been independently verified, according to DailyDarkWeb.

Why it matters

If real, Thai national ID numbers paired with addresses and phone numbers enable SIM-swap attempts, loan fraud and calls impersonating the university or government agencies, according to the source's analysis. Students, staff and alumni are the potential victims.

What to do

Monitor the university's official channels for confirmation or denial. Warn affiliated people to distrust unexpected verification or payment requests.

For the technical team

Affected: Banco de dados de usuários da Universidade de Chulalongkorn, uma das principais universidades da Tailândia, segundo aleg · User database of Chulalongkorn University, Thailand; 81,705 alleged records in JSON format.
Exploitation: No exploitation reported. Alleged sale on an underground forum for $1,000 with escrow, reported by DailyDarkWeb on October 27, 2026. Claim not independently verified and no university confirmation.
Fix: Not applicable: no product vulnerability is identified in the sources.
More details: Claimed fields per record: first and last names, national ID card number, full address and phone number. The actor accepts escrow. DailyDarkWeb analyst note: Thai national ID numbers with addresses and phones are enough for SIM-swap attempts, loan fraud and calls impersonating the university or government agencies. The full source is exclusive to DailyDarkWeb subscribers.