A cloud-based Advance Passenger Information System (APIS) database linked to Vietnam was found exposed on the internet, containing approximately 220 million records of passenger and crew data. The leak included sensitive personally identifiable information such as names, passport numbers, dates of birth, nationalities, and flight details dating from 2017 to 2026. Researchers discovered the exposed system through a cloud-based path using default credentials. The database has since been secured or taken offline following disclosure, though the exact owner and origin of the data remain unconfirmed.

What should defenders do?

Organizations should ensure that cloud-based systems, particularly those handling sensitive passenger and travel data, are not accessible via default credentials. Security teams should conduct regular exposure scanning of internet-facing assets, restrict database access to authorized networks only, and enforce strong authentication mechanisms. Individuals should monitor accounts for signs of identity theft and consider credit freezes if passport or personal details have been compromised.

highData Breaches

220 Million Traveler Records Exposed in Vietnam-Linked APIS Database Leak

Unsecured cloud database contained names, passport numbers, and flight details spanning nine years

CyberIntel DeskPublished 22 days agoUpdated less than a minute ago1 min read

220 Million Traveler Records Exposed in Vietnam-Linked APIS Database Leak

Key Takeaways

An unsecured Vietnam-linked APIS database exposed approximately 220 million passenger and crew records.
Sensitive data included names, passport numbers, dates of birth, nationalities, and flight details spanning 2017 to 2026.
Researchers accessed the system via a cloud-based path using default credentials.
The database has been secured or taken offline following disclosure.

Related Security News

highData Breaches

Times Car Confirms Data Breach Affecting 6.6 Million User Accounts

Times Car, a Japanese car-sharing service, has confirmed a data breach compromising approximately 6.6 million user accounts. The incident was disclosed late last week, with the exact attack vector and nature of exposed personal information yet to be fully specified. Authorities and the company are reportedly investigating the breach.

BleepingComputerabout 4 hours ago1 min read

highdata-breaches

French Tax Administration Data Breach Exposed Hundreds of Thousands of Records via Stolen Staff Credentials

An unauthorized access incident at France's Direction Générale des Finances Publiques (DGPP) compromised tax data belonging to hundreds of thousands of taxpayers and businesses between June and July 2026. According to a report published by France's national cybersecurity agency ANSSI on 29 September 2026, the attacker used stolen staff passwords to gain entry. The agency stated the attack was 'not sophisticated' and went undetected for seven weeks due to weak security controls. ANSSI noted that neither the tax administration nor the agency itself observed data exfiltration, though the breach resulted in unauthorized access to sensitive fiscal information.

The Hacker Newsabout 5 hours ago1 min read