Vietnamese passenger database leak exposes millions of Korean airline traveler details
A security flaw in Vietnam's Advanced Passenger Information System allowed public access to over 220 million travel records, including nearly 25 million entries from five Korean carriers.
Kinryū Labs discovered an openly accessible repository of roughly 107 GB that holds over 210 million passenger records and 10.46 million crew records from Vietnam's air-travel information system. The data, spanning Jan. 7 2017 to Apr. 30 2026, includes personal identifiers and flight details for travelers from more than 1,000 airlines, with nearly 25 million entries linked to five Korean airlines. The repository was reachable using default credentials such as "admin/admin," granting administrative access without further authentication.
Vietnamese officials have not confirmed a leak, and the Korean Personal Information Protection Commission has asked for cooperation while monitoring the dark web. The incident highlights gaps in cross-border data protection and has prompted calls for stronger international cooperation to verify management and security of overseas personal data transfers.
