Skip to content
Submit incident
AII-1000-33573
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.

Thai hacker arrested after using AI chatbots to breach gaming sites

A Thai fugitive with minimal education used AI chatbots to learn hacking and breached an online gaming platform in June 2026, stealing over 200,000 baht through payment fraud. Thai Cyber Police arrested him in Phuket on July 18, 2026, after he attempted to delete his arrest warrants and shifted focus to private sector targets.

June 2026 Β· Sahachat Β· Security and cyberattacks
June 2026
AII-1000-33573
Quick facts
Category
Security and cyberattacks
Country
Thailand
Date
June 2026
Drafted by
Raidu Incident Detection

What happened

A 26-year-old Thai man with a sixth-grade education used Claude AI chatbots to teach himself advanced hacking techniques while hiding near the Myanmar border to avoid arrest warrants. He initially attempted to breach the Royal Thai Police database to erase his own criminal records, but when that failed, he targeted private websites with weaker security.

In June 2026, he hacked Firstup.in.th, an online gaming and mobile credit platform, by bypassing security measures, creating fake user accounts, and manipulating the payment gateway to trick the system into generating fake credits. He exchanged these fake credits for expensive digital items, causing the company to lose over 200,000 baht in real funds.

Reported impact

Firstup.in.th reported losses of more than 200,000 baht from the fraudulent transactions. The suspect was arrested in Phuket on July 18, 2026, with police seizing computers, mobile phones, a loaded firearm with ammunition, and methamphetamine pills from his rented room.

Index analysis

Cybersecurity experts warned that this case demonstrates how AI can accelerate the learning curve for malicious actors. Without regular system updates and strong defenses, organizations risk becoming easy targets for AI-assisted attacks.

Classification

Category
Security and cyberattacks
Industry
Digital security
Country
Thailand
Harm status
Actual harm
Intent
Intentional
Timing
Post-deployment
Harm types
Economic or property
Harmed
Business
Consequences
Police investigation
AI systems
Claude

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident