Myanmar authorities say they have arrested a man accused of stealing data from education, job-search, vehicle-rental, telecom, digital-payment and government platforms, then demanding money and threatening to publish users’ personal information. The government has not disclosed how many people were affected, what data was taken or whether the targeted organisations recovered their information.
The suspect, identified in state media as Wai Phyo Aung, also known as Aung Myo, was arrested on Sept. 10, according to reports published by Myanmar’s state media and carried by regional outlets a month later. Authorities say the alleged intrusions began in June and continued into September.
The targets reportedly included student accounts at an international college and a foreign university in Myanmar, a local job-search website and a vehicle-rental brokerage. In August, the suspect allegedly accessed a telecommunications website and a private digital-payment system; a government online service was targeted the following month.
Investigators allege the intruder used stolen data as leverage, demanding payment for its return and threatening to publish users’ personal details online. The public statements do not identify the organisations or payment provider involved, and no companies or institutions have publicly detailed the incidents in the reporting reviewed.
Authorities have not provided an estimate of the number of accounts or records accessed, the categories of personal information involved, or whether any data has been published. They also have not disclosed how much money was demanded, whether any payments were made, or whether the alleged incidents disrupted services. The published accounts describe the claims as findings from an investigation; they do not offer independent technical evidence or statements from affected organisations.
Those gaps matter to users. Student records, job-search profiles and payment accounts can contain different kinds of sensitive information, but without knowing what was exposed, people cannot assess their own risk or determine whether they should take protective steps. The authorities’ account also leaves open whether the suspect acted alone and how access was gained.
Myanmar’s Ministry of Information said the government is expanding e-government services and digital infrastructure. It described the alleged attacks, data theft and extortion as threats to that effort and said legal action was being taken against the arrested man. The authorities urged anyone with information about planned attacks on government infrastructure, private online services or payment systems to report it confidentially.
