The Thuosci.vn Leak: 35,000 Pharma Emails Exposed. Yours Might Be One.
In November 2024, Thuocsi.vn -- a Vietnamese B2B e-commerce platform serving the pharmaceutical industry -- suffered a database breach that put nearly 35,000 user email addresses into the hands of threat actors. For a platform connecting pharmaceutical businesses across Vietnam, that is not just a privacy incident. It is a direct line into an industry that handles regulated medications, sensitive supply chains, and high-value business relationships. Even without passwords in the dump, exposed email addresses from this sector are precisely what attackers use to craft convincing phishing and spear-phishing campaigns against suppliers, distributors, and buyers.
Why This Is Dangerous
Pharmaceutical platforms operate at the intersection of regulated goods and high-trust business relationships. A leaked list of verified email addresses from Thuocsi.vn gives attackers a ready-made targeting list -- people who work in procurement, distribution, or pharmacy operations. Those people are more likely to respond to emails impersonating a known supplier or logistics partner. The platform's specialized nature amplifies the risk well beyond a typical retail breach.
What Was Exposed
- Email addresses (approximately 34,979 records)
No passwords were included in this breach. However, email addresses alone are sufficient for phishing, credential stuffing (when combined with other leaked datasets), and social engineering attacks.
Why This Matters
Even a single data type like an email address carries real downstream risk:
- Phishing and spear-phishing: Attackers send convincing emails impersonating known vendors or platform notifications to steal credentials or install malware.
- Account takeover: If users reuse this email with weak or repeated passwords elsewhere, attackers can access those accounts through credential stuffing.
- Identity theft and fraud: B2B contacts are high-value targets -- business email compromise (BEC) schemes frequently begin with exactly this kind of email list.
- Industry disruption: In pharmaceutical supply chains, even a successful phishing attack against a distributor can delay critical medication deliveries or expose proprietary business data.
How Database Breaches Work
A database breach occurs when unauthorized parties gain access to a company's stored user data -- typically through exploiting unpatched vulnerabilities, weak access controls, SQL injection attacks, or compromised administrator credentials. Once inside, attackers extract records in bulk. In this case, Thuocsi.vn's customer or user database appears to have been directly accessed and exported. The data then surfaces on dark web forums or is sold to other threat actors.
Check If You Are Affected
If you have ever registered on Thuocsi.vn or done business through the platform, your email address may be in this dataset. HEROIC's database contains over 400 billion compromised records -- use our free breach checker to see if your email appears in this breach or thousands of others.
Breach Breakdown
34,979 passwords exposed. Is yours one of them?
Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.
Free forever · No account required · Results in seconds
/img/qr-code.png)