Vietnam’s National Credit Database Hit By Cyberattack

Vietnam’s cybersecurity agency announced on Thursday that hackers had attacked the Vietnam National Credit Information Center (CIC) and stolen a large database containing sensitive information on creditors.

According to Reuters, the attackers gained access to credit card details, payment records, risk analyses, and general personal data. Authorities have warned residents to remain vigilant and are investigating the breach.

“Initial investigation indicated signs of unauthorised access aimed at stealing personal data, with the extent of the breach still being assessed,” said the cybersecurity agency on Thursday.

Reuters also reported that the CIC, in a letter sent to financial institutions, confirmed it was investigating the incident and suspected the hacker group Shiny Hunters—a criminal organization known for targeting international companies such as Microsoft, Google, and Qantas—was behind the attack.

A few days ago, Google confirmed that Shiny Hunters was responsible for a separate cyberattack on its Salesforce systems.

The CIC added that the attack did not affect its services. “The incident has not disrupted operations or caused any damage, and the credit information service system remains fully functional,” stated the letter.

Vietnamese authorities have not disclosed details about the scale of the breach, including the number of victims or accounts affected. In a note to investors on Friday, JPMorgan warned that the incident could pose a risk to deposit flows and would likely increase cybersecurity costs for banks.

The Vietnamese government also released an announcement on its website, confirming the breach and assuring the public that authorities were working to contain the damage.

“The parties have synchronously deployed technical and professional measures to respond, verify, and ensure network security,” states the announcement, according to a Google translation. “People are also advised to be vigilant and avoid the risk of having their personal information exploited to spread malware, commit fraud, and misappropriate property.”