Back to Radar
VN

VNG

High

The 2015 hack of VNG exposed personal data, including email addresses and password hashes, of over 24 million users.

Records exposed
24,853,850 records
Breach date
Breach May 19, 2015
Last update
Updated Apr 28, 2018

What data was exposed?

Fields reported as compromised in this breach record.

Dates of birthEmail addressesGendersIP addressesMarital statusesNamesOccupationsPasswordsPhone numbersPhysical addressesUsernames

Why does this breach matter?

In-depth analysis of the breach and its implications.

The VNG data breach, initially uncovered in 2018, involved exposure of extensive user information originating from a 2015 incident. This breach affected over 24.8 million records, including sensitive details such as usernames, email addresses, physical addresses, and unsalted MD5 password hashes. This data was observed circulating within unauthorized forums, emphasizing the importance of robust security mechanisms to prevent such disclosures.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Compromised personal data and potential account breaches due to weak password encryption.
Business Impact
Possible reputational and operational damage, including loss of user trust and regulatory scrutiny.
Affected Sectors
  • Digital Platforms
  • Gaming Industry
Geographic Impact
  • Vietnam

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Change your passwords immediately if you had accounts associated with VNG.
  • Monitor your email accounts for signs of unauthorized access.
  • Consider utilizing identity theft protection services.

Preventive Measures

  • Use strong, unique passwords for each service.
  • Implement two-factor authentication for your accounts.
  • Stay informed about common cybersecurity practices.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Start by updating your passwords for all accounts especially concerning reuse and consider monitoring for unauthorized activities.