Arrest of a Cybercriminal Responsible for 90 Data Breaches in Asia-Pacific

He preferred extorting ransoms rather than selling his loot on the dark net.

On February 28, 2025, Singaporean and Thai law enforcement arrested a 39-year-old man in Bangkok, suspected of being behind at least 90 data breaches in the Asia-Pacific region. His victims included companies in the healthcare, retail, finance, logistics, insurance, and recruitment sectors.

The hacker primarily targeted organizations in Thailand, Singapore, Malaysia, Indonesia, and India, and, to a lesser extent, in the United Kingdom, Canada, and the United States. Known by the aliases ALTDOS, DESORDEN, GHOSTR, and 0mid16B, he frequently changed his online identity to evade capture. Often, the cybercriminal would communicate with his victims to extort a ransom rather than sell their data on the dark web.

During his arrest, Thai authorities seized several laptops, electronic devices, and numerous luxury items. The cybercriminal reportedly admitted to hacking over 70 databases alone, focusing on large companies and avoiding government agencies.