https://pwnsy.com/tools/cyber-watch/vietnam/Sourced cyber incidents and official statements, from pwnsy Cyber Watch.enSun, 08 Nov 2026 00:00:00 +0000https://dantri.com.vn/kinh-doanh/hon-668000-tai-khoan-thanh-toan-co-dau-hieu-vi-pham-phap-luat-can-lam-gi-20261107142442193.htm1a6fd54dfafbb39aFri, 06 Nov 2026 00:00:00 +0000A05 deputy director Col. Nguyen Ba Son said more than 668,000 payment accounts showed signs of unlawful activity.https://pwnsy.com/tools/cyber-watch/vietnam/#all5a966d8ecf6f7998Thu, 05 Nov 2026 00:00:00 +0000Vexy Ransomware listed the Vietnamese AI image and voice service on 5 November 2026. Sources: https://www.ransomware.live/id/WmlwQUlAVmV4eSBSYW5zb213YXJlhttps://hanoionline.vn/viet-nam-len-an-manh-me-truoc-cac-vu-tan-cong-mang-246261105231444029.htmeb6ee1fef168df41Thu, 05 Nov 2026 00:00:00 +0000The foreign ministry says Vietnam is closely monitoring the cyberattacks on supermarket refrigeration systems.https://pwnsy.com/tools/cyber-watch/vietnam/#all70a4e54cf03b902cSun, 01 Nov 2026 00:00:00 +0000Outsiders accessed the system on 30 Oct; contained, users must reset passwords. A headline suggests over 7 million accounts were hacked; HOCMAI has not confirmed a figure. Sources: https://tapchianninhmang.vn/hocmai-len-tieng-sau-nghi-van-lo-du-lieu-yeu-cau-doi-mat-khauhttps://pwnsy.com/tools/cyber-watch/vietnam/#all4d89f3e3fbaa39a6Sat, 31 Oct 2026 00:00:00 +0000Listed on The Gentlemen's leak site; FPT has not commented. Sources: https://www.ransomware.live/id/RlBUIFNvZnR3YXJlQHRoZWdlbnRsZW1lbghttps://cafef.vn/uy-ban-chung-khoan-yeu-cau-cong-ty-chung-khoan-ra-soat-tang-cuong-an-ninh-mang-188261103222147325.chne355ff70f9129ff4Fri, 30 Oct 2026 00:00:00 +0000The State Securities Commission ordered securities and fund firms to review cybersecurity after attacks affected financial, banking and some securities systems.https://vietnamnet.vn/cuc-an-ninh-mang-khuyen-cao-doanh-nghiep-ra-soat-lo-hong-php-2567511.htmla966d39024c364b4Thu, 22 Oct 2026 00:00:00 +0000The Department of Cybersecurity urges organisations running PHP sites to patch PHP2Shell by priority and keep monitoring.https://baodautu.vn/bao-dong-bao-mat-tin-tac-khong-chi-trom-tien-khach-hang-ma-da-nham-vao-kho-tien-ngan-hang-d729141.html85bad1ec0e45400aThu, 22 Oct 2026 00:00:00 +0000SBV Deputy Governor Pham Tien Dung warned at Smart Banking 2026 that hackers may target banks' own funds and that banks must monitor security and transactions together.https://pwnsy.com/tools/cyber-watch/vietnam/#alldc573265734946f0Wed, 21 Oct 2026 00:00:00 +0000Hyflock listed dangvuongcac on its leak site on 21 October 2026. Sources: https://www.ransomware.live/id/ZGFuZ3Z1b25nY2FjQEhZRkxPQ0shttps://pwnsy.com/tools/cyber-watch/vietnam/#all983301f7cc563b15Mon, 12 Oct 2026 00:00:00 +0000The container terminal operator is listed on N0n's leak site. Sources: https://www.ransomware.live/id/TmFtIERpbmggVnUgUG9ydCAoY29udGFpbmVyIHRlcm1pbmFsIG9wZXJhdGlvbnMpQE4wbghttps://pwnsy.com/tools/cyber-watch/vietnam/#all2672a54e3db66f21Fri, 09 Oct 2026 00:00:00 +0000The logistics hub is listed on Nightspire's leak site. Sources: https://www.ransomware.live/id/VmlldG5hbSBTdXBlclBvcnRAbmlnaHRzcGlyZQhttps://vtv.vn/so-vu-lua-dao-giam-52-nho-xac-thuc-sinh-trac-hoc-100261007193308883.htm5071ca7bd01354e9Thu, 08 Oct 2026 00:00:00 +0000C06 said fraud cases fell 52% in 2025 and over 400 fraud accounts reported through VNeID had been frozen since June.https://pwnsy.com/tools/cyber-watch/vietnam/#allab949a7785e57cf6Fri, 02 Oct 2026 00:00:00 +0000Rhysida claims about 106.8 GB from the hosting and domain provider. Sources: https://www.ransomware.live/id/TWF0IEJhbyBDb3Jwb3JhdGlvbkByaHlzaWRhhttps://pwnsy.com/tools/cyber-watch/vietnam/#all6630b4176cf06d32Wed, 30 Sep 2026 00:00:00 +0000Listed on The Gentlemen's leak site. Sources: https://www.ransomware.live/id/VlVTIC0gVGhlIEVuZ2xpc2ggQ2VudGVyQHRoZWdlbnRsZW1lbghttps://congan.com.vn/vu-an/triet-pha-nhieu-vu-mua-ban-du-lieu-trai-phep_198051.htmlb5dcebeaf371502dThu, 24 Sep 2026 00:00:00 +0000An A05 report said police handled 40 data leak and data trading cases in the first half of 2026.https://pwnsy.com/tools/cyber-watch/vietnam/#all5772e5d33dd5a4cfMon, 21 Sep 2026 00:00:00 +0000Researchers found an exposed attacker toolkit, captured 21 September 2026, with a realm-admin token for the MOFA Keycloak sign-on server plus attempted attacks on Ministry of Public Security mail and a Ministry of Construction portal. Sources: https://www.infrahunter.com/research/inside-attacker-toolkit-targeting-vietnam-government-networkshttps://baolaocai.vn/hai-anh-em-bi-khoi-to-vi-mua-ban-120-trieu-du-lieu-ca-nhan-post910025.html1e3ecc6051e52b42Mon, 21 Sep 2026 00:00:00 +0000Provincial police charged a man for collecting and selling about 120 million personal records linked to agencies and businesses.https://pwnsy.com/tools/cyber-watch/vietnam/#all2deca5285b53f138Sat, 19 Sep 2026 00:00:00 +0000Listed on Vexy's leak site. Sources: https://www.ransomware.live/id/UXV5IE5ob24gVW5pdmVyc2l0eUBWZXh5IFJhbnNvbXdhcmUhttps://pwnsy.com/tools/cyber-watch/vietnam/#allc13e8f35f73023dfFri, 18 Sep 2026 00:00:00 +0000N0n posted data it said came from the AWS environment of BeLi Teacher and FSC education centers on 18 September 2026. Sources: https://www.ransomware.live/id/QmVMaSBUZWFjaGVyIC8gRlNDIGVkdWNhdGlvbiBjZW50ZXJzIChBV1MpQE4wbghttps://pwnsy.com/tools/cyber-watch/vietnam/#allff116aa31fcdbc8fFri, 18 Sep 2026 00:00:00 +0000N0n listed a Vietnamese betting operator it named as the GC789 network on 18 September 2026. Sources: https://www.ransomware.live/id/VmlldG5hbWVzZSBiZXR0aW5nIG9wZXJhdG9yIChHQzc4OSBuZXR3b3JrIC8gQm91bmRsZXNzIFRFKUBOMG4https://pwnsy.com/tools/cyber-watch/vietnam/#all08ea5a3d67cca9f5Sun, 30 Aug 2026 00:00:00 +0000Black X said it obtained personal information of millions of FE CREDIT customers and threatened to leak it unless contacted (estimated attack 28 August 2026). Sources: https://www.ransomware.live/id/RkUgQ1JFRElUQEJsYWNrIFg, https://darkfield.orizon.one/victims/24f405e8-ca66-46e5-bd2d-97aa1c902f23https://pwnsy.com/tools/cyber-watch/vietnam/#all30be08d0ad78f9ebWed, 26 Aug 2026 00:00:00 +0000Krybit listed sankovn.com on its leak site on 26 August 2026. Sources: https://www.ransomware.live/id/d3d3LnNhbmtvdm4uY29tQGtyeWJpdAhttps://pwnsy.com/tools/cyber-watch/vietnam/#allc537645d31eaaed0Sat, 22 Aug 2026 00:00:00 +0000Emperador claimed over 300 GB including about 13.36 million customer records, 6.99 million subscriptions and 2.26 million account records, offered for sale. Sources: https://www.ransomware.live/id/VmlldG5hbSBFbGVjdHJpY2l0eShFVk5IQU5PSSlAZW1wZXJhZG9y, https://cyberthreatintelligence.net/ransomware-victim/vietnam-electricity-evnhanoi-emperador-2026https://pwnsy.com/tools/cyber-watch/vietnam/#allb5b4512b3dc7303bWed, 12 Aug 2026 00:00:00 +0000Quang Ninh police and the A05 department dismantled a ring that bought personal data, posed as bank staff, took over VND 110 billion from thousands of victims and laundered 1.24 million USDT. Sources: https://baotintuc.vn/an-ninh-trat-tu/danh-sap-duong-day-lua-dao-mua-ban-du-lieu-ca-nhan-quy-mo-lon-tren-mang-20260812191859222.htmhttps://baotintuc.vn/an-ninh-trat-tu/danh-sap-duong-day-lua-dao-mua-ban-du-lieu-ca-nhan-quy-mo-lon-tren-mang-20260812191859222.htmc3af2c9b64de698aWed, 12 Aug 2026 00:00:00 +0000Quang Ninh police and A05 dismantled a data trading and fraud ring that took over VND 110 billion.https://pwnsy.com/tools/cyber-watch/vietnam/#all0e3cdaca55db8174Fri, 07 Aug 2026 00:00:00 +0000L Group listed l-a.com.vn on its leak site on 7 August 2026. Sources: https://www.ransomware.live/id/bC1hLmNvbS52bkBMIEdyb3Vwhttps://pwnsy.com/tools/cyber-watch/vietnam/#all4cb55b7f6f497084Tue, 04 Aug 2026 00:00:00 +0000INC Ransom listed the conglomerate's domain on 4 August 2026 and claimed 200 GB of data. Sources: https://www.ransomware.live/id/aHR0cHM6Ly9nZWxleGltY28udm4vQGluY3JhbnNvbQhttps://pwnsy.com/tools/cyber-watch/vietnam/#all77cf9d7af448ae9dWed, 22 Jul 2026 00:00:00 +0000Nova listed VNSO on its leak site on 22 July 2026. Sources: https://www.ransomware.live/id/Vk5TT0Bub3Zhhttps://pwnsy.com/tools/cyber-watch/vietnam/#all04bf17995b4b1234Sat, 18 Jul 2026 00:00:00 +0000INC Ransom listed Vedan Corp on its leak site on 18 July 2026. Sources: https://www.ransomware.live/id/dmVkYW4gY29ycEBpbmNyYW5zb20https://pwnsy.com/tools/cyber-watch/vietnam/#all961c62a228c86d6bFri, 17 Jul 2026 00:00:00 +0000Nova listed Digipro on its leak site on 17 July 2026. Sources: https://www.ransomware.live/id/RGlnaXByb0Bub3Zhhttps://afamily.vn/triet-pha-duong-day-mua-ban-hon-50-trieu-du-lieu-ca-nhan-can-bo-lanh-dao-doanh-nghiep-236260707173947045.chncd59ebc6af24bff5Tue, 07 Jul 2026 00:00:00 +0000Nghe An police reported seizing over 50 million personal records from a two-person data trading group.https://vietstock.vn/2026/07/nhnn-100-tai-khoan-giao-dich-so-da-xac-thuc-sinh-trac-hoc-chan-dung-hon-5200-ty-dong-lua-dao-757-1461413.htmd2c3273bc6c6db2fThu, 02 Jul 2026 00:00:00 +0000SBV said 100% of accounts with digital transactions were biometrically matched and SIMO247 warnings led 1.5 million customers to stop transfers worth over VND 5,200 billion.https://afamily.vn/triet-pha-duong-day-mua-ban-hon-50-trieu-du-lieu-ca-nhan-can-bo-lanh-dao-doanh-nghiep-236260707173947045.chnc8b9299197ec37f4Tue, 23 Jun 2026 00:00:00 +0000Nghe An provincial police arrested two people on 23 June 2026 who held over 50 million personal records (72.4 GB) of officials, students and business leaders and sold them on Facebook and Telegram.https://pwnsy.com/tools/cyber-watch/vietnam/#all8ec0612654a06f9dSun, 21 Jun 2026 00:00:00 +0000Nova listed Nha Thanh Pho on its leak site on 21 June 2026. Sources: https://www.ransomware.live/id/TmjDoCBUaMOgbmggUGjhu5FAbm92YQhttps://pwnsy.com/tools/cyber-watch/vietnam/#allbb6c0eedc3ef721aSat, 20 Jun 2026 00:00:00 +0000LockBit 5 listed the higher education institution at utb.edu.vn on 20 June 2026, with an estimated attack date of 15 May 2026. Sources: https://www.ransomware.live/id/dXRiLmVkdS52bkBsb2NrYml0NQhttps://pwnsy.com/tools/cyber-watch/vietnam/#alle6155c70c49cb414Sat, 20 Jun 2026 00:00:00 +0000RansomEXX said it released the complete database of the hourly hotel booking platform on 20 June 2026. Sources: https://www.ransomware.live/id/R28ySm95IChnbzJqb3kudm4pQHJhbnNvbWV4eAhttps://pwnsy.com/tools/cyber-watch/vietnam/#all860deececf85d2fdFri, 19 Jun 2026 00:00:00 +0000Ho Chi Minh City police announced 11 cases with nearly 200 suspects who bought victims' personal data online and took VND 612 billion through vacation-contract fraud. Sources: https://congan.com.vn/vu-an/triet-pha-nhieu-vu-mua-ban-du-lieu-trai-phep_198051.htmlhttps://pwnsy.com/tools/cyber-watch/vietnam/#all46b03305d6d779f5Mon, 15 Jun 2026 00:00:00 +0000Qilin listed a Vietnamese general construction consulting joint stock company on 15 June 2026; the tracker shows the name with Vietnamese characters stripped. Sources: https://www.ransomware.live/id/Q25nIFR5IENwIFQgVm4gWGQgVG5nIEhwQHFpbGluhttps://pwnsy.com/tools/cyber-watch/vietnam/#all26fe1f84a09bb269Fri, 12 Jun 2026 00:00:00 +0000ThreeAM listed hoplongtech.com on its leak site on 12 June 2026. Sources: https://www.ransomware.live/id/aG9wbG9uZ3RlY2guY29tQHRocmVlYW0https://vietnamnews.vn/society/1783172/teenager-accused-of-hacking-viet-nam-s-vaccination-system-selling-20-million-personal-records.html001c21d0b6e79e1fWed, 10 Jun 2026 00:00:00 +0000Lam Dong police announced charges against a 16-year-old who allegedly sold 20 million records from the national vaccination system.