A threat actor claims to have exfiltrated a database from the Ministry of Health of Vietnam containing over 480,000 sensitive records, including the personal data of doctors, nurses, and medical staff. The actor, identifying as the founder of “FEMBOYSec Intelligence Team,” has issued a warning to the Vietnamese government to negotiate for the protection of the data and threatens to sell the records to third-party buyers if no agreement is reached. A first batch has already been published as a public download.

• ID, full name, gender, date of birth
• Place of origin, ethnicity, nationality
• Document type, document number, document issue date, document issuing authority
• Residential address, province, city, district, ward, commune
• Phone number, email
• Affiliated unit, current workplace
• Requested scope of practice, practice certificate code, practice certificate issue date, practice certificate issuing place
• Practice certificate signatory and position of certificate signatory
• Practice information, scope of practice on certificate
• Qualification number, qualification issue date
• Educational institution, education level, form of training
• Health facility name, position, department
• Practice duration, working duration, total time
• Job description, appraisal result, appraisal reason, appraisal scope of practice
• Specific scope of practice
• Disciplinary form, discipline date, discipline effective from, discipline effective until, discipline signatory, discipline content
• Application type, subject category
• Submitting entity, receiving agency, submission date
• Data entry clerk, position of entry clerk, internal code