Thai authorities are investigating reports that more than 36 million records containing Thai citizens' personal data are being offered for sale online.