
The 1 Co, Thailand’s Central Group subsidiary, has issued an apology following a data breach that potentially exposed the personal information of approximately 5 million members of its loyalty program. Despite an initial investigation revealing no flaws in its database or security systems, the company has pledged to reinforce its cybersecurity measures and cooperate with authorities to prevent further incidents.
In a statement, The 1 Co expressed deep regret for the breach and acknowledged customers’ concerns. The company underscored its commitment to safeguarding user data, stating that it had engaged a data protection officer to assess its systems, which were found to be intact. Nonetheless, The 1 Co emphasized its resolve to enhance security protocols and work alongside governmental and private entities to bolster system defenses.
The company urged customers to remain vigilant against fraudulent activities, advising them to block individuals claiming to represent The 1 Co and exercise caution in personal data transactions. Clients were warned not to share one-time passwords (OTPs), click on suspicious links, or respond to messages from unverified sources.
The breach has triggered an investigation by Thailand’s Office of the Personal Data Protection Commission (PDPC). Wetang Phuangsup, acting secretary-general of the PDPC, confirmed that The 1 Co has been directed to conduct a thorough review of its security infrastructure and report findings within seven days.
Reports suggest that the breach involved a hacker who unsuccessfully demanded a ransom and is now threatening to sell the stolen data. This development has heightened concerns over the privacy and safety of the affected customers’ information.
The 1 Co operates Thailand’s largest digital lifestyle and loyalty platform, serving over 18 million members. It is part of Central Group, a multinational conglomerate with diverse business interests, including retail, real estate, brand management, hospitality, and food and beverage sectors.
© 2025, Lyonsdown Limited. teiss® is a registered trademark of Lyonsdown Ltd. VAT registration number: 830519543