Vietnamese E-commerce Company Allegedly Breached

A company operating in Vietnam’s e-commerce sector is allegedly the victim of a data breach. A threat actor has posted on a messaging platform claiming to be in possession of a real-time shopping database belonging to an unnamed Vietnamese online retailer. A potential compromise of the platform’s data could be a serious concern for its users.

The seller of the database claims that the data is “fresh & verified,” and captured on a daily basis, which could suggest an ongoing breach of a live system. The advertisement for the sale describes the leak as “exclusive” and originating directly from the e-commerce source. The potential exposure of customer information is extensive, allegedly including a wide array of personal and transactional details. This incident highlights the persistent threats facing online businesses and the critical importance of cybersecurity measures to protect customer data.

The compromised information allegedly includes the following details:

• Sales list
• Customer name
• Email
• Phone number
• Address
• Order code and date
• Product information
• Discounts and payment details
• Total amount of purchase
• Payment method
• Delivery status and charges