The State Bank of Vietnam (SBV) has announced that immediately after receiving information about a data breach incident at the Vietnam National Credit Information Center (CIC), it directed CIC to urgently coordinate with relevant state authorities to verify, clarify the cause, and resolve the incident; while also ensuring the system operates smoothly and without interruption.
The SBV stated that the CIC database does not include sensitive personal information such as: deposit accounts, account balances, savings passbooks, payment accounts, debit card numbers, credit card numbers, security codes (CVV/CVC), or customer transaction history.
It affirmed that the information technology systems of credit institutions in Vietnam operate completely independently from the CIC. The services of credit institutions are currently operating normally, continuously, safely, and stably.
From a management perspective, the SBV has been continuously directing credit institutions to review their systems, ensuring strict compliance with legal regulations related to information security, data confidentiality, and the protection of customers' legitimate rights. The illegal collection, exploitation, use, exchange, or provision of credit information will be strictly handled according to current regulations.
The State Bank also recommends that the public strictly follow instructions and recommendations from regulatory agencies and credit institutions regarding information security, and not provide account information or authentication codes to any unknown individuals or organizations. Special vigilance is needed against sophisticated forms of fraud such as: malware dissemination, fake bank messages, or impersonation of staff to appropriate assets.