2025 Vietnam CIC (national credit bureau) intrusion — creditor PII theft under investigation; VietinBank among CIC contributor banks
Data compromised
General personal identifiers and credit-behavior/risk-analysis fields per agency descriptions—central bank messaging downplayed certain core banking credentials as outside CIC data classes
Technical writeup
In September 2025, Vietnam’s National Credit Information Center (CIC), a State Bank of Vietnam-linked repository for creditor risk and payment-history data, reported unauthorised access with personal data theft under assessment; media cited an agency letter naming the Shiny Hunters persona. CIC stressed continued service availability while investigations proceeded. VietinBank and peers are routine data contributors to CIC, so consumer credit-file material is the practical exposure surface even when primary custody sits with the bureau.
Root cause
External intrusion into national credit-information systems (detailed TTPs pending official technical release)