A threat actor has reportedly put up for sale a database allegedly obtained from the Department of Medical Examination and Treatment Management under Vietnam’s Ministry of Health. According to the actor, the database contains approximately 257,000 user records, including fields such as ID, name, ID card details, phone numbers, dates of birth, addresses, and email addresses. The asking price for this dataset is $3000, payable in either XMR or BTC.
With access to sensitive data such as names, ID card details, phone numbers, addresses, and email addresses, a threat actor can engage in various malicious activities. These may include identity theft, financial fraud, phishing attacks, targeted scams, impersonation, and even extortion. Additionally, they could sell the data on the dark web, leading to further exploitation by other cybercriminals. Such breaches of personal information pose significant risks to individuals’ privacy and can have far-reaching consequences, underscoring the importance of robust cybersecurity measures and data protection protocols.