Vietnam’s national credit registration and reporting agency hacked; most of the population affected

Vietnam’s national credit registration and reporting agency is reported to have been hacked, with ShinyHunters claiming to have exfiltrated more than 160 million records from the Credit Institute of Vietnam, which runs the National Credit Information Center under the State Bank of Vietnam.

According to ShinyHunters, the data sample described as more than 160 million records includes very sensitive information such as general PII, credit payment details, and IDs, and they suggested the entire population could be involved since the country’s population is slightly under 102 million. The group said they gained access by an n-day exploit and that the software was end-of-life, with no patch available. They claimed there was no ransom attempt because they did not expect a response.

DataBreaches[.]net asked the CIC for details on unique individuals and other specifics, but no reply had been received by publication, and the post notes that attribution to Scattered Spider or Lapsus$ was not made, with ShinyHunters indicating the name situation was unresolved.