Vietnam's national credit registration and reporting agency hacked; most of the population affected - DataBreaches.Net

"Some data breaches make headlines for the number of people affected globally, such as a Facebook scraping incident in 2019 that affected 553 million people worldwide. Then there are breaches that affect a country's entire population or much of it, such as a misconfigured database that exposed almost the entire population of Ecuador in 2019, an insider breach that compromised the information of almost all Israelis in 2006,"

"Vietnam National Credit Information Center is a public non-business organization directly under the State Bank of Vietnam, performing the function of national credit registration; collecting, processing, storing and analyzing credit information; preventing and limiting credit risks; scoring and rating the credit of legal entities and natural persons within the territory of Vietnam; and providing credit information products and services in accordance with the provisions of the State Bank and the law."

ShinyHunters claims to have exfiltrated more than 160 million records from the Credit Institute of Vietnam, which manages the state-run National Credit Information Center. The center collects, processes, stores, and analyzes credit information, scores and rates credit of legal entities and natural persons, and provides credit information products and services under the State Bank of Vietnam. The leaked sample was described as containing very sensitive information including general PII, credit payment history, risk analyses, encrypted credit card data, military IDs, government IDs, tax IDs, income statements, and debt records. Affiliates boasted the system was compromised within 24 hours and listed the data for sale on a hacking forum.

Read at DataBreaches.Net