What Happened
In 2025, Vietnam Airlines suffered a major data breach via a compromised third-party Salesforce CRM system, with unauthorized access occurring around June 2025 and data spanning November 2020 to June 2025. The hacking group Scattered LAPSUS$ Hunters (linked to ShinyHunters) stole approximately 63-64 GB of customer data affecting over 23 million records and 7.3 million unique individuals, including names, email addresses, phone numbers, dates of birth, Lotusmiles frequent flyer details, and some corporate account information—but excluding credit card details, passwords, payment info, passports, or travel itineraries. The breach was publicly disclosed on dark web forums starting October 3-14, 2025, after ransom demands went unmet, prompting Vietnam Airlines’ official acknowledgment on October 14-18 and warnings about phishing risks.
