User advice after information about personal data leak incident at CIC

The National Cyber ​​Security Association warns of the risk of bad guys taking advantage of this event to impersonate, scam, spread malware or steal users' information and assets.

On the afternoon of September 11th, the Vietnam National Cyber ​​Emergency Response Center (VNCERT) issued a notice regarding a personal data leak at the National Credit Information Center (CIC).

Accordingly, initial verification results indicate signs of cyberattack and intrusion activities aimed at stealing personal data. The amount of data illegally obtained is still being compiled and clarified.

The Research, Consulting, Technology Development and International Cooperation Committee of the National Cybersecurity Association (Technology Committee) has received several questions and concerns from members regarding whether the incident at CIC (Credit Information Center) will affect banking systems, especially accounts and credit cards. Many members are also concerned about whether users need to block their cards or change their bank passwords to ensure security.

Mr. Vu Ngoc Son, representative of the Technology Committee of the National Cybersecurity Association, affirmed: "Based on preliminary assessments, Vietnam's banking and credit system remains secure, well-protected, and operating stably. People do not need to take measures such as blocking cards, accounts, changing CVC/CVV codes, or changing passwords simply because of concerns based on unofficial information online. These actions do not enhance security; on the contrary, they can disrupt transactions and directly affect daily life."

Furthermore, the National Cybersecurity Association also warned of the risk of malicious actors exploiting this event to impersonate banks and authorities in order to commit fraud, spread malware, or steal users' information and assets. These actors may make fake phone calls or send fake messages requesting users to provide personal information, credit card details, CVV/CVC verification codes, OTP security codes, etc. Users should note that banks absolutely do not request customers to perform these actions through unofficial channels.

Users should also refrain from sharing or disseminating unofficial or unverified information online, especially information related to the type and quantity of data, as authorities are currently investigating and clarifying the matter. They should only monitor and receive official information from competent authorities.

(Vietnam+)

Source: https://www.vietnamplus.vn/khuyen-cao-nguoi-dung-sau-thong-tin-su-co-lo-du-lieu-ca-nhan-tai-cic-post1061445.vnp