The National Credit Information Center (CIC), managed by Vietnam’s State Bank, suffered a major cyberattack attributed to the hacker group ShinyHunters, exposing over 160 million records—far exceeding Vietnam’s population of 102 million, indicating duplicate historical and current financial data per individual. The breach compromised personally identifiable information (PII), including names, government/tax IDs, addresses, contact details, employment histories, and credit records, though some financial data (e.g., credit cards) remained encrypted. The attackers are selling the dataset on dark web forums rather than deploying ransomware.The incident poses severe risks of identity theft, loan fraud, and phishing, as criminals exploit exposed details to impersonate victims or access accounts. While CIC’s operations remain functional, the breach erodes systemic trust in Vietnam’s financial institutions, potentially increasing security costs and undermining confidence in the banking sector. Authorities are investigating the attack vector and mitigating further exposure, but the scale of the leak—covering nearly all citizens’ financial histories—highlights vulnerabilities in centralized sensitive data repositories.