Home Web information Student exam data sold on the web

Student exam data sold on the web


High school students were at Prasarnmit Demonstration School at Srinakharinwirot University in Bangkok on February 22, 2020, one of the venues for university matriculation tests on February 22, 2020. (Photo: Wichan Charoenkiatpakul)

The personal information of more than 23,000 students who took part in last year’s exams has been leaked and sold on the internet by hackers.

The information, which included student names, ID card details and grades, was stolen from Thailand’s Central University Admissions System (TCAS) and sold on the dark web, the Council of University Presidents of Thailand (CUPT).

The stolen information belongs to students who took part in the third round of the university entrance exam, which was held around May last year.

The files could have been exported in May last year by a university staff member, the CUPT said.

Last year’s admissions database – known as TCAS64 – was closed in December. This year’s version, TCAS65, has been updated to ensure better protection of students’ personal information.

“The CUPT apologizes for the impact to personal information. In light of the incident, it is reviewing the database and working procedures with the support of the National Cybersecurity Agency [NCSA],” It said.

The NCSA told the Bangkok Post that the leak could have been caused by an error by university staff who carelessly exported the TCAS data.