Nov 22, 2019 / 16:28

Vietnam bank exposed to security breach with 2M accounts leaked

The Hanoitimes - According to the hacking source, it has full records of all the bank users.

Personal data of two million bank accounts of a Hanoi-based bank have been exposed online, according to Vietnamese media.

Litur*** user posted on the Raidforums saying it is possessing confidential data of two million Vietnamese user accounts of Maritime Bank (MSB) including full name, identity card number, telephone number, home address, date of birth, gender, email and occupation of the customers.

 A screenshot of the post. Photo: Vietnamnet

Raidforums is where hackers sell personal information and customer data. However, MSB customers’ confidential data are posted for free download.

According to the hacking source, it has full records of all the bank users. Worse still, this two million data directory is not the only breach and the hacker will soon reveal more data.

Anyone wanting the full version must pay the hacker who pledged that the data is the latest update.

When Zing News tried verifying information of some breached bank accounts, all the personal information matches the hacker's data.

Zing said this incident occurred about one month ago and shortly after that MSB requested the authorities to remove the customer personal data on the hacker forum.

However, as of November 21 afternoon, the above-mentioned data remained intact.

Earlier, in November 2018, an international hacker announced on Raidforums that he had personal data of five million customers of Vietnam’s Mobile World Group, including email, transaction history and even credit card numbers.

Just one week after breaching Mobile World Group database, hackers disclosed the database of FPT Shop retail system. The data given by hackers include membership applications and personal data of customers with full names, addresses and identity cards.

A part of database which was supposed to belong to Con Cung chain stores had also been published on the Raidforums.

In mid-2016, the website of the Vietnam Airlines was hacked and hundreds of thousands of its customer loyalty program data were exposed such as date of joining and expiry and accumulated points, among others.