Identity Theft Risk Grows After the Ketnoith Breach: 155,774 Exposed

What HEROIC Analysts Found in the Ketnoith Breach

In May 2024, HEROIC analysts identified a data breach tied to Ketnoith, a Vietnamese IT services provider. The breach exposed 155,774 records after the data surfaced on a public hacking forum. The compromised information includes email addresses, phone numbers, first names, and last names belonging to Ketnoith's contacts and customers.

Why the Ketnoith Breach Increases Identity Theft Risk

With more than 155,000 full names, emails, and phone numbers exposed in a single dump, attackers now have a large, ready-made list for identity theft attempts. This kind of data lets criminals impersonate Ketnoith or its clients in phishing emails, build fake support calls using real names and numbers, and cross-reference the data with other leaked databases to build fuller profiles of individual victims. The larger the dataset, the more efficient these attacks become for the people running them.

What Was Exposed in the Ketnoith Breach

• Email addresses
• Phone numbers
• First names
• Last names

Why This Matters for Ketnoith Contacts

Even without passwords in this dataset, exposed emails and phone numbers are frequently used as the starting point for credential stuffing attacks against other accounts, since many people reuse the same email across multiple services. Attackers also use verified contact information to run convincing business email compromise scams, targeting IT clients and partners who might expect communication from a provider like Ketnoith. Once your name, email, and phone number are circulating together, the risk of financial fraud and further identity theft increases significantly.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers obtained records directly from Ketnoith's systems rather than through malware infecting individual computers. Database breaches of this size typically stem from unpatched software, exposed backups, or weak access controls on a web application. Once extracted, the data is usually packaged and posted on hacking forums, exactly where this dataset was discovered.

Check If You Are Affected by the Ketnoith Breach

If you have ever done business with Ketnoith or been in contact with the company, it is worth checking whether your information was part of this exposure. HEROIC's free breach scanner searches a database of more than 400 billion leaked records to show you if your information has appeared in this breach or any other. Run a free scan today to check your exposure.