> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # Alleged Breach of KBank Vietnam Exposes 10.1 Million Credit Registration Records With National IDs, Salaries, Credit Scores, and Employer Details - URL: https://darkwebinformer.com/alleged-breach-of-kbank-vietnam-exposes-10-1-million-credit-registration-records-with-national-ids-salaries-credit-scores-and-employer-details/ - Published: 2026-04-06T16:18:24.000Z - Updated: 2026-04-06T17:16:42.000Z - Author: Dark Web Informer - Tags: Data Breaches Dark Web Informer - Cyber Threat Intelligence # Alleged Breach of KBank Vietnam Exposes 10.1 Million Credit Registration Records With National IDs, Salaries, Credit Scores, and Employer Details April 6, 2026 - 12:08:15 PM UTC Vietnam Banking / Financial Services Standalone API Access Now Available High-volume threat-intelligence data, automated ingestion endpoints, ransomware feeds, IOC data, and more. [ View API](https://darkwebinformer.com/api-details/) Unlock Exclusive Cyber Threat Intelligence Powered by DarkWebInformer.com Stay ahead of cyber threats with real-time breach tracking, expert analysis, and high quality evidence - built for security professionals, researchers, journalists, and everyday people who take their privacy seriously. [ Subscribe Now](https://darkwebinformer.com/pricing) ## Quick Facts Date & Time 2026-04-06 12:08:15 UTC Threat Actor hackboy Victim KBank Vietnam (Kasikornbank) Industry Banking / Financial Services Category Data Breach Total Records 10,152,989 Extraction Date February 2026 Source System Kbank\_Vietnam\_Core Severity Critical Price Contact Seller Network Open Web Country Vietnam ## Incident Overview A threat actor going by hackboy claims to be selling credit registration data from KBank Vietnam (Kasikornbank's Vietnamese operations), including both accepted and pending loan applications. The dataset allegedly contains 10,152,989 records extracted in February 2026 from the Kbank\_Vietnam\_Core system. This is a major banking data breach that exposes the full financial profile of millions of Vietnamese loan applicants. The sample data and field listing reveal an exceptionally detailed per-record structure. Each registration includes: - **Identity Data**: Customer IDs, full names (Vietnamese), national ID numbers (CMND/CCCD, Vietnam's citizen identification), dates of birth, and phone numbers. - **Residential Data**: Full home addresses including ward, district, and city details. - **Employment and Income**: Job titles, base salaries, employer names, and work locations. The sample data shows specific company names, salary figures, and position titles for each applicant. - **Credit Data**: CIC credit scores (Vietnam's Credit Information Center scores used by all Vietnamese banks for lending decisions), risk classifications (the sample shows "Watchlist\_B" categorization), and branch names (Sunwah Branch HCM in the sample). - **Relationship Data**: A relationship field is included in each record, suggesting the database captures family or guarantor connections between applicants. - **Profile Classification**: Profile type fields categorize each record's loan application status. - **System Metadata**: Export dates (the sample shows April 6, 2026 at 13:17:51), security tags marked "CONFIDENTIAL-INTERNAL-USE", and system origin tagged as "Kbank\_Vietnam\_Core". The combination of national ID numbers, salaries, employer details, credit scores, and risk classifications makes this one of the most complete financial identity datasets to appear in a breach listing. For affected individuals, this data is sufficient for loan fraud, identity theft, social engineering against their employers, and targeted financial scams. The CIC credit scores are particularly sensitive because they are used across Vietnam's entire banking system for credit decisions. ## Compromised Data Categories Customer IDs Full Names (Vietnamese) National ID Numbers (CMND/CCCD) Dates of Birth Phone Numbers Home Addresses Job Titles Base Salaries Employer Names Work Locations CIC Credit Scores Risk Classifications Bank Branch Names Relationship / Guarantor Data Loan Profile Types ## Image Preview [![Forum post by hackboy selling 10.1 million KBank Vietnam credit registration records with data fields in Vietnamese and English, sample PHP code showing loan applicant details including national IDs, salaries, credit scores, and system metadata](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/04/78923695862978569278356978269783592.png)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/04/78923695862978569278356978269783592.png) ## Claim URL Subscriber Access Required The original listing URL and unredacted claim images are available on the Threat Feed and Ransomware Feed for paid subscribers. [ Subscribe](https://darkwebinformer.com/pricing) Subscriber Access View the original listing URL and unredacted claim images on the feeds below. [ Threat Feed](https://darkwebinformer.com/threat-feed/) [ Ransomware Feed](https://darkwebinformer.com/ransomware-feed) ## MITRE ATT&CK Mapping [ T1190 Exploit Public-Facing Application Targets vulnerabilities in the bank's web applications or core banking API to gain unauthorized access to the Kbank\_Vietnam\_Core credit registration database. ](https://attack.mitre.org/techniques/T1190/) [ T1213 Data from Information Repositories Extracts over 10 million structured credit registration records from the core banking system, pulling personal identifiers, financial profiles, employment details, and credit risk assessments. ](https://attack.mitre.org/techniques/T1213/) [ T1589.001 Gather Victim Identity: Credentials Harvests national ID numbers (CMND/CCCD), personal details, salary information, and credit scores for 10.1 million individuals, creating a comprehensive financial identity theft dataset. ](https://attack.mitre.org/techniques/T1589/001/) [ T1005 Data from Local System Extracts data directly from the core banking system with system metadata including export timestamps, confidentiality tags, and system origin identifiers confirming internal access. ](https://attack.mitre.org/techniques/T1005/) [ T1567 Exfiltration Over Web Service Advertises and sells the stolen banking data through web forums and Telegram, with samples and pricing available via direct message and middleman/escrow accepted. ](https://attack.mitre.org/techniques/T1567/) [ T1657 Financial Theft The combination of national IDs, salaries, employer details, and CIC credit scores enables loan fraud, identity theft, and targeted financial scams against millions of Vietnamese banking customers. ](https://attack.mitre.org/techniques/T1657/) Dark Web Informer © 2026 | Cyber Threat Intelligence [DarkWebInformer.com](https://darkwebinformer.com/)