VietLoan Alleged Data Exposure
The 2024 VietLoan data breach occurred in February 2024 when customer loan applicant databases belonging to VietLoan (vietloan.vn), a Vietnamese online micro-lending and consumer finance platform, were published on BreachForums by threat actor Petya152r5.
Exposed Data Types
6- Email addresses
- Names
- Phone numbers
- Dates of birth
- Genders
- Website activity
About This Record
What information was compromised in the VietLoan incident?
The leaked dataset (users_vietloan.vn.csv) encompasses over 2.1 million loan applicants and registered borrower records. Impacted data classes include:
- Personal & Demographic Identifiers: Applicant legal names, self-reported genders, and dates of birth.
- Contact Credentials: Validated user email addresses and active Vietnamese mobile telephone numbers.
- Platform Telemetry: Loan application sequence IDs, registration timestamps, and account activity logs.
How many accounts were affected?
Standardized RFC 5322 ASCII canonical verification confirmed 2,126,636 unique valid email addresses across 2,131,438 total records.
Security implications and advisory
The exposure of financial loan applicant records paired with dates of birth and direct mobile phone numbers significantly increases vulnerabilities to targeted loan-approval smishing, banking impersonation scams, and identity fraud. Impacted users should:
- Maintain vigilance against unsolicited calls or text messages requesting processing fees for loan disbursements.
- Routinely audit credit bureau records and bank account statements for fraudulent loan applications.
- Secure linked email accounts using robust passwords and multi-factor authentication (MFA).
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
