Vietnam confirms data theft after Shiny Hunters breach of national credit center

The Vietnamese government confirmed on September 11, 2025, that hackers had stolen data from the National Credit Information Center (CIC). The breach, claimed by the Shiny Hunters group, could involve millions of citizens’ and companies’ financial records.

On September 11, 2025, the Vietnamese government confirmed that cybercriminals had stolen data from the National Credit Information Center (CIC). Managed by the State Bank of Vietnam, the CIC collects and processes information related to the debts and incomes of citizens and businesses. “The amount of data illegally obtained is still being assessed,” the national CERT, VN-CERT, said in a statement.

Two days earlier, on September 9, the group Shiny Hunters, a spinoff of Scattered Spider, had claimed responsibility for the breach. The cybercriminals say they exfiltrated around 160 million records, later put up for sale on an underground forum. A sample published by the attackers reportedly includes names, addresses, credit card histories, ID documents, income statements, and debt records.