[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2vex399kwxu6q":3,"$fqn676b9aiffz":69},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":14,"contentUpdatedAt":14,"source":15,"sourceUrl":16,"sourceUrls":17,"pwnCount":20,"affectedCount":20,"affectedCountStatus":21,"affectedCountLowerBound":22,"affectedCountUnit":23,"hasEnglishDescription":4,"contentLocale":24,"availableLocales":25,"translations":35,"severity":46,"dataClasses":47,"description":59,"seoTitle":60,"seoDescription":61,"logoUrl":62,"isVerified":4,"isSensitive":63,"isSpamList":63,"isMalware":63,"company":64},"68e3266eda11adda48825400","VNG","VNG 数据泄露","vng","zing.vn","2015-05-19T00:00:00.000Z","2018-04-28T07:49:02.000Z","2026-10-10T09:32:30.671Z","2026-10-10T10:44:07.855Z","Account data breach","https:\u002F\u002Fvng.com.vn\u002F",[16,18,19],"https:\u002F\u002Fcongnghe.tuoitre.vn\u002Flo-thong-tin-hang-tram-trieu-tai-khoan-khach-hang-vng-xin-loi-20180427225719109.htm","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20180428013143id_\u002Fhttps:\u002F\u002Fcongnghe.tuoitre.vn\u002Flo-thong-tin-hang-tram-trieu-tai-khoan-khach-hang-vng-xin-loi-20180427225719109.htm",24853850,"known",null,"unknown","zh",[26,27,24,28,29,30,31,32,33,34],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":36,"tr":37,"zh":38,"hi":39,"es":40,"ar":41,"fr":42,"bn":43,"pt":44,"ru":45},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},"Critical",[48,49,50,51,52,53,54,55,56,57,58],"Dates of birth","Email addresses","Genders","IP addresses","Marital statuses","Names","Occupations","Passwords","Phone numbers","Physical addresses","Usernames","\u003Cp>2015年5月，一起涉及 VNG 旗下 Zing ID 游戏账户的数据泄露事件导致\u003Cstrong>24,853,850 个不重复的电子邮箱地址\u003C\u002Fstrong>暴露。2018年4月，有人在犯罪论坛上出售这批数据，事件因此公之于众。VNG 承认部分用户信息已泄露，并向用户致歉。\u003C\u002Fp>\u003Ch2>暴露的数据类型及风险\u003C\u002Fh2>\u003Cp>本记录所列的数据类型包括出生日期、电子邮箱地址、性别、IP 地址、婚姻状况、姓名、职业、密码、电话号码、实体地址和用户名。密码\u003Cstrong>采用未加盐的 MD5 进行哈希处理\u003C\u002Fstrong>，这种方式无法充分保护弱密码免遭离线猜测破解。\u003C\u002Fp>\u003Cp>这些丰富的个人资料可被用于定向钓鱼、短信诈骗、滥用账户恢复流程，以及利用密码重复使用的情况尝试接管账户。支付卡、银行账户、身份证件和私信不属于本记录已核实的数据类型。\u003C\u002Fp>\u003Ch2>泄露时间线与技术细节\u003C\u002Fh2>\u003Cp>本记录采用的泄露日期为2015年5月19日。2018年4月，论坛上的一则出售帖声称，一个 7.55 GB 的压缩包包含 163,666,400 行 Zing ID 数据；这一原始数据行数与本记录采用的 24,853,850 个不重复电子邮箱地址并非同一统计口径。VNG 表示，公司在2015年曾记录到可能有1.6亿个 Zing ID 面临风险，并采取技术措施限制影响，同时发现实际泄露主要涉及游戏用户，并未影响其他产品。该公司还表示，约 99% 的账户已超过一年未使用。具体的技术入侵入口未公开披露。\u003C\u002Fp>\u003Ch2>面临风险的用户群体\u003C\u002Fh2>\u003Cp>拥有 Zing ID 或 VNG 游戏账户的用户面临的风险最高，尤其是在其他服务中重复使用同一用户名和密码的用户。攻击者可将姓名、出生日期、职业、婚姻状况、电话号码和地址结合起来，编写针对个人的信息；电子邮箱和 IP 信息则可用于关联账户和尝试登录。\u003C\u002Fp>\u003Ch2>应立即采取的措施\u003C\u002Fh2>\u003Cp>更换原来的 Zing ID 或 VNG 密码，并更改所有使用相同或相似密码的账户密码。为每项服务设置\u003Cstrong>独一无二的密码\u003C\u002Fstrong>，优先确保电子邮箱账户的安全，结束当前已登录的会话，并在支持的服务中启用两步验证。对于包含电话号码、地址或职业信息的意外消息，应通过独立渠道核实。\u003C\u002Fp>\u003Ch2>长期安全策略\u003C\u002Fh2>\u003Cp>使用密码管理器为每个账户生成不同的密码，并关闭不再使用的游戏或门户账户。在个人资料字段中只保留必要信息，并持续留意涉及实体地址、电话号码和出生日期等难以更改的数据的钓鱼消息及账户恢复通知。\u003C\u002Fp>\u003Ch2>查询您的数据\u003C\u002Fh2>\u003Cp>使用您曾用于 Zing ID 或 VNG 的电子邮箱地址查询本记录。出现匹配意味着该地址存在于本记录采用的 VNG 数据集中；这并不意味着论坛出售帖所声称的1.63亿行数据全都对应独立用户或活跃用户。如果查询结果显示存在匹配，请更改所有重复使用原游戏账户密码的账户密码。\u003C\u002Fp>","VNG 数据泄露 (24.9 百万 已报告记录数)","VNG 数据泄露. 据报告，涉及24.9 百万条记录。 已报告的数据：出生日期, 电子邮箱地址, 性别。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fzing_vn.webp",false,{"name":7,"sector":65,"country":66,"website":67,"websiteArchiveUrl":68,"websiteStatus":68,"websiteCheckedAt":22},"Technology \u002F Gaming & Internet","Vietnam","vng.com.vn","",{"success":4,"breaches":70},[71,78,85,92],{"slug":72,"title":73,"companyName":74,"logoUrl":75,"breachDate":76,"affectedCount":77,"affectedCountStatus":21},"medela","Medela 数据泄露","Medela","\u002Fuploads\u002Flogo\u002Fmedela.webp","2026-09-07T00:00:00.000Z",423947,{"slug":79,"title":80,"companyName":81,"logoUrl":82,"breachDate":83,"affectedCount":84,"affectedCountStatus":21},"dustin-group-2026-data-security-incident","Dustin Group 2026年数据安全事件","Dustin Group AB (publ)","\u002Fuploads\u002Flogo\u002Fdustingroup_com-6aaab48e5041e3a842fe832a-e26a53490c4a5cbe.webp","2026-09-03T00:00:00.000Z",1062841,{"slug":86,"title":87,"companyName":88,"logoUrl":89,"breachDate":90,"affectedCount":91,"affectedCountStatus":21},"elekta-2026-data-breach","Elekta 2026年数据泄露事件","Elekta AB","\u002Fuploads\u002Flogo\u002Felekta-2026-veri-ihlali-afc72236a8ad.webp","2026-09-01T00:00:00.000Z",129576,{"slug":93,"title":94,"companyName":95,"logoUrl":96,"breachDate":90,"affectedCount":97,"affectedCountStatus":98},"novocure-2026-data-breach","NovoCure 2026年数据泄露事件","NovoCure Limited","\u002Fuploads\u002Flogo\u002Fnovocure-2026-veri-ihlali-96b5c9defb8a.webp",1400,"lower_bound"]