{
 "Event": {
  "uuid": "2ceaa6d1-4431-5d21-9dce-b5562b5f35f0",
  "info": "Vietnam-linked APIS database exposes 220.8 million passenger and crew records",
  "date": "2026-06-03",
  "threat_level_id": "1",
  "analysis": "2",
  "distribution": "3",
  "published": false,
  "Orgc": {
   "name": "SecurityStudies.info"
  },
  "Tag": [
   {
    "name": "tlp:clear"
   },
   {
    "name": "securitystudies:status=\"curated\""
   },
   {
    "name": "securitystudies:type=\"data_breach\""
   },
   {
    "name": "misp-galaxy:country=\"vietnam\""
   },
   {
    "name": "misp-galaxy:sector=\"Transportation and Aviation\""
   },
   {
    "name": "misp-galaxy:sector=\"Government\""
   }
  ],
  "Attribute": [
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://securitystudies.info/cyber/incidents/vietnam-linked-apis-database-exposes-2208-million-passenger-and-crew-records/",
    "comment": "SecurityStudies.info entry",
    "to_ids": false
   },
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://securityaffairs.com/198671/data-breach/massive-vietnam-linked-apis-database-exposes-passport-and-flight-data.html",
    "comment": "source",
    "to_ids": false
   },
   {
    "type": "text",
    "category": "Other",
    "value": "Kinryu Labs discovered an unsecured Elasticsearch cluster named 'pax-info' hosted on Viettel-assigned IP space in Hanoi containing 220.8 million Advance Passenger Information System records across 29 indices and roughly 107GB. Exposed fields included names, dates of birth, nationalities, passport and travel-document numbers, flight numbers, airline details, seat assignments and baggage references, covering January 2017 to April 2026. The operator could not be definitively identified; researchers notified Vietnamese authorities, airlines and national CERTs on 3 June and the database was secured by 8 June, with public disclosure following on 8 September. Affected travellers span Asia-Pacific, Europe and the Middle East, and absent server logs no conclusion could be drawn on prior theft.",
    "comment": "summary",
    "to_ids": false
   }
  ]
 }
}