Our Analysts Found the Selly (selly.vn) Dump in Private Telegram Channels

In February 2022, the Vietnamese e-commerce platform Selly (selly.vn) suffered a database breach that exposed personal data from over 222,000 user accounts. The dump recieved little immediate attention but resurfaced years later on private Telegram channels, putting affected users at renewed risk from phishing and identity theft campaigns targeting Vietnamese consumers.

What Attackers Can Do With Selly User Data

With email addresses, phone numbers, and full names in hand, attackers can launch highly convincing spear-phishing campaigns. Fraudsters can craft messages that appear legitmate and target victims by name across email, SMS, and messaging apps, making it partcularly difficult for recipients to identify the scam before clicking a malicious link or surrendering additional credentials.

What Was Exposed in the Selly (selly.vn) Breach

• Email Address
• Phone Number
• First Name
• Last Name

Why the Selly Breach Still Matters in 2025

Data from breaches rarely disappears. The Selly dump, originally from February 2022, was traded and shared across illicit marketplaces for years before surfacing on Telegram. The 222,879 affected users remain at risk as long as their email addresses and phone numbers are in circulation. Criminals bundle old breach data with newer leaks to build detailed profiles used in account takeover attacks, SIM swap fraud, and targeted scams against Vietnamese consumers and diaspora communities worldwide.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a backend data store, typically by exploiting misconfigured servers, weak credentials, or unpatched software vulnerabilities. Once inside, they export records in bulk, often as structured CSV or SQL dumps, and later trade or sell the files on dark web forums and encrypted messaging channels like Telegram. The clean, well-structured nature of the Selly data suggests a direct database export rather than scraped or aggregated records.

Check If Your Data Was Exposed

HEROIC DarkWatch monitors over 400 billion leaked records, including data from the Selly (selly.vn) breach. Search your email address now to find out if your personal information is part of this or any other known data breach, and take immediate steps to secure your accounts.