Our Analysts Found the Phan Mem Net User Database on a Dark Web Forum

HEROIC analysts found a database containing exposed user records from Phan Mem Net (Net Software), a Vietnamese IT services and software distribution platform, with a leak date of August 7, 2024. The data appeared on a dark web forum and contained 10,020 records from phanmemnet.com. The exposed information included email addresses, phone numbers, first names, and last names — no passwords were included, but the contact and identity data alone is enough to fuel targeted attacks.

The platform's audience makes this breach particularly notable. Phan Mem Net serves a technology-oriented user base interested in software tools and IT resources. Threat actors who acquire this dataset know they are targeting people with above-average device access and potentially elevated permissions within their organizations. A convincing phishing email impersonating a software vendor or update notification sent to a verified, named tech professional is far more likely to result in malware installation or credential theft than a generic mass-phishing campaign.

What Was Exposed

• Email addresses
• Phone numbers
• First names
• Last names

Why This Matters

Contact and identity data enables phishing, smishing, and vishing attacks at scale. When that data comes from a technology platform, the attacks can be tailored to impersonate software updates, license renewal notices, or technical support communications — pretexts that are far more effective against an IT-aware audience than generic scams. Aggregated with other breached datasets, this information can also contribute to identity theft, fraudulent account creation, and targeted corporate espionage attempts against the companies these tech professionals work for.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a backend data store and extracts stored records. Common attack paths include SQL injection vulnerabilities in web applications, misconfigured database access permissions, and compromise of administrative credentials through phishing or credential stuffing. Once the data is exported, it is typically packaged and distributed on dark web forums or sold to other criminal actors. Vietnam's growing tech sector has made it an increasingly frequent target, as platforms scale rapidly without always matching that growth with equivalent security investment.

Check If You Are Affected

HEROIC's free scanner searches more than 400 billion exposed records, including data from the Phan Mem Net breach. Go to heroic.com to enter your email address and get a free report on your exposure across all known data leaks.