Thailand's digital ministry says 221 million leaked login records are tied to the country, spanning around 30,000 government systems and more than 35,000 private ones. It goes to Cabinet today to make multi-factor authentication mandatory on key state systems, and the minister openly called that a way to buy time while the deeper weaknesses get fixed. The number I'd worry about is 30,000. You can't put MFA on systems nobody has finished counting.