Vietnam Airlines Data Breach Exposed Details of 23 Million Customers in 2025

In June 2025, Vietnam Airlines, the country’s national flag carrier, suffered a major data breach that compromised the personal details of millions of its customers. Attackers gained unauthorized access to the airline's Salesforce environment, resulting in the exposure of sensitive customer data such as full names, dates of birth, phone numbers, email addresses, detailed contact information, and frequent flyer membership numbers. The breached information remained at risk until October 2025, when a large set of nearly 23.1 million records was posted openly online, making the scale of the incident clear and raising significant concerns about customer privacy and the security of critical personal data in the airline industry.

What Happened in the Vietnam Airlines Breach?

Vietnam Airlines learned in June 2025 that attackers had exploited vulnerabilities within their Salesforce systems. The breach allowed unauthorized parties to extract and later leak extensive customer datasets, including detailed personal and contact information. This incident put millions of travelers’ data at risk and highlighted the importance of robust protections around CRM and loyalty program environments used by airlines and other service providers.

How Many People Were Affected?

Reports indicate that approximately 23,129,781 customer records were compromised in this breach. Each affected record could include a full set of personal information—making this one of the largest data incidents experienced by an airline in recent years.

What Type of Data Was Compromised?

The exposed customer data covers a wide range of identifying details:

• Full names
• Email addresses
• Phone numbers
• Dates of birth
• Full mailing and residence addresses, including street numbers, cities, states, zip codes, and countries
• Loyalty program membership numbers

In some cases, the breach revealed both primary and secondary address lines plus other social and contact fields typically stored in travel loyalty databases.

Timeline of the Vietnam Airlines Data Breach

• June 2025: Vietnam Airlines’ Salesforce system was breached, customer data was accessed and extracted.
• October 2025: The compiled set of exposed records appeared on public forums, confirming the magnitude and scope of the incident.

Frequently Asked Questions

What happened in the Vietnam Airlines data breach?

Vietnam Airlines suffered a breach of its Salesforce environment in June 2025, leading to the leak of personal details for over 23 million customers. Attackers later released the data publicly in October 2025.

How many customers were affected by the Vietnam Airlines breach?

Approximately 23.1 million individual records were compromised, affecting a substantial portion of Vietnam Airlines’ customer base.

What personal data was leaked in the Vietnam Airlines breach?

Leaked data included names, email addresses, phone numbers, birth dates, complete addresses, and loyalty membership numbers.

When did the Vietnam Airlines data breach occur?

The initial breach took place in June 2025, with the compromised data being posted online in October 2025.

How can I check if I'm in the Vietnam Airlines breach?

You can check if your information was part of the Vietnam Airlines breach by utilizing the DeHashed search engine.