Vietnam is facing a serious cybersecurity incident as hackers have targeted the country’s National Credit Information Center (CIC), a central database managed by the State Bank of Vietnam. The CIC is responsible for keeping sensitive financial information, including personal details, credit payments, credit card data, and risk analysis for individuals and businesses.

The cyberattack has raised concerns about the safety of personal and financial information in Vietnam. Authorities are still assessing the impact of the attack, but they have confirmed that the database has been accessed without permission, possibly to steal personal data.

Stay informed with the latest news. Follow DXB News Network on WhatsApp Channel 

What Happened?

On Thursday, Vietnam’s cybersecurity agency issued a statement confirming that unauthorized access to the credit database had occurred. The agency explained that the hackers appeared to target the system to obtain personal and financial data, but the full extent of the breach is still under investigation.

Additionally, a letter from the CIC, dated September 11 and sent to various financial institutions, highlighted that the center is actively investigating the incident. The letter mentioned suspicions that the international hacker group Shiny Hunters may be responsible. This group is known for attacking global companies such as Google, Microsoft, and Qantas in the past.

Despite the breach, CIC confirmed that the incident has not caused any disruption to its operations. The credit information system continues to work normally, and there is no reported damage to the infrastructure.

Who Are the Hackers?

The suspected group, Shiny Hunters, has a history of cyberattacks worldwide. They are known for stealing sensitive information from large companies and selling it on underground markets. While Reuters attempted to contact representatives of Shiny Hunters, they could not be reached immediately.

The Vietnamese authorities have not yet revealed how many accounts may have been affected by this cyberattack.

Possible Effects on Banks and Customers

Investment bank JPMorgan released a note to investors regarding the incident. The bank highlighted that such cyberattacks could increase the cost for banks in Vietnam, as institutions may need to invest more in cybersecurity to protect sensitive information.

There is also a potential risk to deposit flows, meaning that customers might withdraw money if they fear their information could be compromised. However, JPMorgan emphasized that their recommendation to remain invested in Vietnamese banks still stands, unless the breach spreads widely or further attacks occur.

Previous Cybersecurity Concerns in Vietnam

Vietnam has experienced a rising trend in data breaches over the past years. In a 2024 cybersecurity report, Viettel, a military-run telecommunications company in Vietnam, revealed that 14.5 million accounts were leaked, which accounted for 12% of the global total.

This shows that cybersecurity threats are becoming increasingly serious in the country. Experts warn that such attacks can undermine public trust in digital banking and financial services.

What Information Is at Risk?

The CIC stores a wide range of sensitive information, including:

• Personal identification details of individuals

• Credit payment history and loan records

• Risk assessments and credit scores

• Credit card information

The loss or theft of such data could lead to identity theft, financial fraud, and other serious consequences for Vietnamese citizens.

Response From Authorities

While the central bank of Vietnam has not publicly commented on the situation, the cybersecurity agency has assured the public that they are investigating the breach. They are working with the CIC and other relevant institutions to contain the incident and prevent future attacks.

The CIC’s letter to financial institutions emphasizes that all precautionary measures are being taken and the system remains fully functional. However, the investigation is ongoing to determine exactly how much data was accessed and who was behind the attack.

Why This Matters

Cyberattacks on financial institutions are dangerous because they target the very systems that hold personal and sensitive financial data. If hackers succeed in stealing this information, it could lead to:

• Unauthorized transactions or financial fraud

• Identity theft and misuse of personal data

• Increased costs for banks to improve cybersecurity measures

• Reduced confidence in digital banking systems

For a country like Vietnam, which is increasingly moving towards digital banking and financial services, ensuring cybersecurity is essential to protect both citizens and businesses.

What Experts Suggest

Cybersecurity experts suggest several steps that could help prevent future breaches:

1. Strengthening Security Protocols: Banks and financial institutions need to adopt stronger encryption methods and multi-factor authentication.

2. Monitoring and Alerts: Continuous monitoring of data systems can help detect suspicious activities early.

3. Public Awareness: Citizens should be informed about how to protect their personal data and report suspicious activities.

4. Collaboration with Global Experts: Working with international cybersecurity agencies can provide additional protection against sophisticated hacker groups.

The recent cyberattack on Vietnam’s National Credit Information Center serves as a reminder of how critical cybersecurity is in the digital age. While the system remains operational and no immediate damage has been reported, the potential risk to personal and financial information is significant.

Authorities are actively investigating the incident, and banks are reviewing their security measures to prevent future attacks. Citizens are advised to stay vigilant and monitor their financial accounts for unusual activities.

This incident also highlights a broader challenge for countries worldwide: as digital banking and financial services expand, the need for robust cybersecurity measures becomes even more critical.

Vietnam’s case may serve as an example for other countries to strengthen their defenses and protect citizens’ sensitive financial data from cyber threats.