Vietnam Airlines data breach: 7.3M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2025-10-11
In October 2025, data stolen from the Salesforce instances of multiple companies by a hacking group calling itself "Scattered LAPSUS$ Hunters" was publicly released. Among the affected organisations was Vietnam Airlines, which had 7.3M unique customer email addresses exposed following a breach of its Salesforce environment in June of that year. The compromised data also included names, phone numbers, dates of birth, and loyalty program membership numbers. Exposed data: dates of birth, email addresses, loyalty program details, names, phone numbers. The breach dates from Jun 20, 2025; Have I Been Pwned loaded it on Oct 11, 2025.
What to do
- If you had a Vietnam Airlines account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
