A Thai company has been left facing a 21-million-baht bill after its Google Cloud account was hacked, allegedly to run cryptocurrency mining operations, according to a complaint posted on social media on July 9, 2025.
Phattharachai Mith Vongkoon, a representative of the affected company, reported that the breach resulted in unusually high charges linked to the misuse of the firm’s Google Cloud services. The intrusion reportedly led to the deployment of crypto-mining activities, significantly inflating the monthly billing.
In response to the incident, Mr. Phattharachai contacted both Google Cloud Support and Google Billing. According to his statement, Google confirmed that an unauthorized access had occurred and verified that the charges were consistent with activity from the breach. However, following its investigation, Google declined to approve a billing adjustment, citing its internal policies.
The disputed charges have since appeared in the company’s expense reports, complicating efforts to reverse the financial impact. Mr. Phattharachai also filed a police report regarding the breach, but as of now, he has received no update on the investigation’s progress.
The case has attracted public attention after Mr. Phattharachai posted about it in a Facebook group, asking for advice and assistance. Social media users have responded with support, recommending that he cancel his payment method and continue working with Google’s support teams. Some noted that similar cases, while challenging, can be resolved over time with persistence.
The company’s representative, Mr. Phattharachai, has been the main source of information about the incident, sharing updates through social media platforms while continuing to pursue a resolution through official and legal channels.
