What Is This About?

If you recently received a letter or an email from Banpeang informing you that your sensitive personal information was compromised in a data breach, we would like to speak with you about your rights and potential legal remedies. Banpeang recently disclosed that it was the victim of a security incident involving its website (www.banpeang.go.th), where an attacker group (EXA-DOS) posted a defacement message claiming domain seizure. No evidence of data theft or specific data exposure was provided in the disclosure.

What Happened?

On or about 2026-06-11, Banpeang publicly disclosed that its website (www.banpeang.go.th) had been defaced by the attacker group EXA-DOS. According to the disclosure, the attackers posted a defacement message and claimed to have seized the domain. The available information does not state when Banpeang first became aware of the incident, whether third-party forensic investigators were engaged, the number of individuals affected, or whether any notice letters were sent to impacted individuals. The disclosure also did not provide evidence that personal information was accessed, acquired, or exfiltrated, and it did not identify any government or Attorney General filings related to the incident.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal information may have been compromised:

• Not specified;

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected users are entitled to compensation. If you received a notice from Banpeang, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.