Vietnamese Loan Borrowers Exposed in the 29,987 Record Robocash Breach

HEROIC found 29,987 records in Robocash on 24-Feb-2025, exposing email addresses, phone numbers, first names, last names, gender, and birthdates of Vietnamese online loan borrowers.

Why This Robocash Vietnam Breach Is Dangerous

Vietnam's online lending market has grown fast, and Robocash, operating at robocash.vn, is one of the automated quick loan platforms serving that demand. Borrowers there trust the service with the core pieces of identity needed to approve a loan in minutes. When those pieces leak together, the damage is specifically financial. The February 24, 2025 dump did not include passwords, but it did include every detail a local scammer needs to impersonate a lender, a collections agent, or a bank representative calling a real Robocash user.

For a dataset of 29,987 records, the impact is concentrated. Nearly every person in the file is a confirmed active loan customer in Vietnam, which makes the target list highly filterable for fraud rings operating in the region.

What Was Exposed in Robocash

• 29,987 borrower records dated 24-Feb-2025
• Email addresses used for loan account signup and communications
• Phone numbers tied to SMS based loan verification
• First and last names in Vietnamese identifying each borrower
• Gender and birthdate used in loan eligibility checks
• Breach type recorded as a Database compromise, language recorded as Vietnamese

Why This Matters

In Vietnam, name plus date of birth plus phone number is enough to run a credible impersonation call for many financial services. Scammers routinely use pretexts like overdue loan notices or bonus disbursements to trick victims into sharing banking one time passwords. Robocash users already associate the brand with loans and payments, which shortens the trust building stage for any attacker calling with real personal information from this file.

The absence of passwords does not make the breach less harmful. It simply shifts the risk from credential stuffing to social engineering, phishing, and smishing, which for a Southeast Asian fintech user base tend to be the more productive attack paths anyway.

How Fintech Database Breaches Like This Happen

Quick loan platforms prioritize speed over defense in depth. Many run on shared infrastructure, outsourced development, and minimal database hardening. Attackers commonly get in through SQL injection, exposed APIs that lack authentication, or stolen credentials from a third party contractor. A full user table is the most compact prize, because it provides everything needed for downstream fraud in one download.

The Robocash record count of 29,987 is consistent with an entire active borrower cohort being exported in a single query, which is the pattern seen across similar regional fintech leaks.

Check If You Are Affected

HEROIC monitors over 400 billion compromised records including regional breaches across Southeast Asia and the dark web sources where the Robocash data is now circulating. A single free HEROIC scan tells you whether your email, phone number, or other identity fields appear in this file. If you are a Robocash customer, scan now and be skeptical of any phone call or SMS claiming to be from the platform or your bank.