According to BleepingComputer, security research organization Kinryū Labs found a suspected passenger information database exposed due to incorrect security configuration. The database appears to be associated with a Vietnamese organization and contains about 221 million records of passengers and crew members, spanning from January 2017 to April 2026. The leaked information includes names, dates of birth, nationality, passport or travel document numbers, as well as details such as flight, seat, and baggage information. Researchers said the database is located within Viettel IP address space in Hanoi, but the specific operating organization cannot be confirmed at this time. The related access issues were fixed on June 8, and there is currently no evidence that the data was maliciously downloaded, sold, or used for extortion.
