Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2025-06-20Verifiedvietnamairlines.com
What happened
In October 2025, data stolen from the Salesforce instances of multiple companies by a hacking group calling itself "Scattered LAPSUS$ Hunters" was publicly released. Among the affected organisations was Vietnam Airlines, which had 7.3M unique customer email addresses exposed following a breach of its Salesforce environment in June of that year. The compromised data also included names, phone numbers, dates of birth, and loyalty program membership numbers.
Data exposed
Frequently asked questions
The Vietnam Airlines data breach occurred on June 20, 2025. It was added to Have I Been Pwned's breach catalog on October 11, 2025.
7,316,915 accounts were affected by the Vietnam Airlines data breach, according to Have I Been Pwned's records.
The Vietnam Airlines breach exposed the following data types: Dates of birth, Email addresses, Loyalty program details, Names, Phone numbers.
Yes. Have I Been Pwned has verified the Vietnam Airlines breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the Vietnam Airlines breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.