The Nguyen Kim Breach Handed Attackers 162K Vietnamese Customer Profiles

HEROIC analysts identified the Nguyen Kim database breach during routine dark web monitoring, with the data surfacing in late November 2021. The breach exposed 162,059 customer records from the Vietnamese electronics and appliance retailer, with attackers making off with phone numbers, full names, and gender information. The volume of recieved personal data from a single retail platform underscores how exposed consumer records can become without proper database security controls in place.

How Attackers Exploit Phone Numbers, Names, and Gender Data

With phone numbers and full names in hand, attackers can launch highly convincing SMS phishing campaigns, impersonate customer service agents, or carry out SIM swapping attacks to seize control of mobile accounts. Gender data makes these social engineering attempts partcularly effective, allowing criminals to craft personalized messages that appear legitimate to the recipient.

What Was Exposed in the Nguyen Kim Breach

• Phone Number
• First Name
• Last Name
• Gender

Why 162K Vietnamese Customer Records Put Real People at Risk

Even without passwords, a dataset combining phone numbers, full names, and gender creates a ready-made toolkit for fraud. Victims may find themselves targeted by spoofed calls, smishing messages, or social engineering attempts tied directly to their Nguyen Kim account. The long-term risk of identity-based fraud from this type of exposure is real, and it occured without users having any warning or ability to opt out.

How Database Breaches Work

A database breach occurs when unauthorized parties gain access to a stored collection of records, typically by exploiting misconfigured servers, unpatched software vulnerabilities, or poorly secured API endpoints. Once inside, attackers can silently copy and exfiltrate entire tables of user data, often without triggering any alarms. The data is then sold or posted on underground forums, where it circulates among cybercriminals long after the initial incident.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records to tell you exactly what data of yours has been exposed online. If your phone number or name appeared in the Nguyen Kim breach or any other leak, you deserve to know. Scan your email for free at HEROIC and take back control of your digital safety.