SBV confirms data incident at CIC, affirms system safety

(Dan Tri) - The State Bank confirmed the data incident at CIC but affirmed that the banking system and transaction services are still safe and stable.

According to a statement on September 12, the State Bank said it had received a report from the Vietnam Credit Information Center (CIC) about an incident related to credit information at this unit.

Accordingly, the State Bank promptly directed CIC to urgently report and closely coordinate with competent State agencies to verify and handle the matter, while ensuring CIC's continuous and smooth operations.

The monetary regulator said it has regularly directed and requested credit institutions to strengthen inspections and ensure strict compliance with legal regulations on security, confidentiality, and safety of information technology systems, and to protect the legitimate rights and interests of customers.

"The illegal collection, processing, exploitation, use, exchange and provision of credit information will be handled according to the provisions of law," the document stated.

Customers are advised to comply with legal regulations and instructions and recommendations of competent authorities on safety and security; follow regulations, instructions and recommendations of credit institutions to protect their rights and interests, as well as to avoid being exploited by bad guys to spread malware, commit fraud, and appropriate property, etc.

CIC is one of four organizations licensed to provide credit information services in Vietnam.

Credit information collected by CIC according to the law does not include information about: deposit accounts, deposit balances, savings books, payment accounts, debit card numbers, credit card numbers, security codes, and customer payment transaction history. The information technology systems of independent credit institutions and the service provision activities of credit institutions are currently being carried out continuously, safely and stably.

On the evening of September 11, the VNCERT Center under the Department of Cyber ​​Security and High-Tech Crime Prevention ( Ministry of Public Security ) said it had received a report of a "cybersecurity incident and signs of personal data breach" occurring at the National Credit Information Center (CIC) on September 10.

This unit has coordinated with enterprises providing network information security services and CIC, functional units of the State Bank to verify incidents, response techniques, collect data and evidence.

"Initial verification results show signs of cybercrime attacks and intrusions to steal personal data. The amount of illegally acquired data is being continuously counted and clarified," the announcement said.

The National Credit Information Center of Vietnam (CIC) under the State Bank performs functions in the monetary and banking sector and is well known for its role in supporting credit institutions in business operations and assisting borrowers in accessing credit sources.

Source: https://dantri.com.vn/kinh-doanh/nhnn-xac-nhan-su-co-du-lieu-tai-cic-khang-dinh-he-thong-an-toan-20250912111133072.htm