Inside the EVN Breach: How Vietnam’s Power Utility Lost Customer Data

HEROIC analysts identified a database breach at Vietnam Electricity (EVN), the state-owned enterprise responsible for electricity generation and distribution across Vietnam, confirmed on March 27, 2025. The incident exposed 98 customer records containing phone numbers, full names, last names, and dates of birth. While the record count is relatively small, the breach affects a national infrastructure provider and involves personal data that can be used in targeted social engineering attacks against real customers.

Why EVN Customer Data Carries Outsized Risk

A utility company like EVN holds data that is tied to physical home addresses, billing cycles, and essential services. When an attacker knows your name, phone number, and date of birth, they can impersonate customer service agents, call victims claiming to be from EVN with fabricated billing emergencies, and trick them into transfering money or disclosing additional personal details. Birthdates are also commonly used as security verification answers for banking and government accounts, meaning this breach gives attackers a key piece of the identity puzzle needed to unlock other accounts.

What Was Exposed in the Vietnam Electricity EVN Breach

• Phone Number
• First Name
• Last Name
• Birthday

Why This Matters for EVN Customers

Even small-scale breaches carry serious individual consequences. Credential stuffing is less relevant here since no passwords were exposed, but the combination of name, phone number, and birthdate enables targeted account recovery attacks. Account takeover becomes possible when attackers use birthdates to answer security questions on other platforms. Identity theft is a genuine risk for any individual whose date of birth is now publicly circulating on criminal forums. Financial fraud can follow when criminals use verified personal details to open accounts or apply for credit in a victim's name.

How a Database Breach at a Utility Company Works

Utility companies operate large customer management systems that store account holder details for billing, service delivery, and communications. These systems are often built on older database platforms and may not recieve the same security investment as financial institutions. A database breach occurs when an attacker exploits a vulnerability in the web application, an unsecured API endpoint, or stolen credentials to access the underlying data store. Once inside, they can query and download customer records within minutes. National infrastructure providers are frequent targets because their systems often contain large volumes of personally identifiable information and because disrupting trust in a utility creates broader public harm.

Check If You Are Affected by the Vietnam Electricity EVN Breach

If you are a customer of Vietnam Electricity and believe your data may be among the records exposed, HEROIC's free breach scanner can help you find out. Our database covers over 400 billion compromised records across hundreds of known breaches. Run a free scan now and take steps to secure any accounts that share your phone number or date of birth as a security credential.