Thegioididong (Mobile World) Alleged Data Exposure
The 2018 Thegioididong (Mobile World JSC) data leak surfaced in November 2018 when a threat actor operating under the handle 'Erwincho' published database dumps on RaidForums alleging to have compromised Mobile World Group (thegioididong.com), the largest consumer mobile and electronics retail corporation in Vietnam.
Exposed Data Types
3- Email addresses
- Partial credit card data
- Transaction histories
About This Record
What information was affected in the Thegioididong incident?
The leaked archive files (emails.txt, tgdd-internal.txt, and transactions.txt) contain 5,488,550 total raw records comprising:
- Customer Contact Records: Over 5.4 million retail customer email addresses.
- Corporate Staff Directory: More than 61,000 internal employee and store email addresses (
@thegioididong.com). - Financial & POS Transaction Data: Over 31,000 store terminal transaction logs detailing Terminal IDs (TID), Merchant IDs (MID), timestamps, transaction amounts, and masked payment card numbers (showing first 6 and last 4 digits).
How many accounts were affected?
Strict RFC 5322 ASCII canonical email validation confirmed 5,416,107 unique valid email addresses across the dataset.
Corporate response & audit status
Following the disclosure, Mobile World JSC management officially denied that an internal infrastructure breach took place, stating that card payments are routed directly through banking terminals and that payment card credentials are not retained on their internal corporate databases. Because the incident was officially disputed and originates from an unverified threat actor forum publication, it is catalogued under reviewed third-party attribution with isVerified: false.
Technical analysis and recommended actions
The exposure of massive volumes of validated customer and employee email addresses, combined with historical retail transaction metadata, creates pronounced threats of spear-phishing, fake order delivery scams, and financial impersonation. Customers are advised to:
- Treat unexpected emails or messages claiming to represent Mobile World or affiliated financial institutions with extreme caution.
- Never disclose one-time passwords (OTP), banking PINs, or card security codes in response to unverified requests.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
