CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

220 million traveler records exposed in Vietnam-linked APIS leak

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 6611

As cited

Copy frozen at (site build).

breaches incidents

220 million traveler records exposed in Vietnam-linked APIS leak

An exposed Advance Passenger Information System (APIS) database linked to Vietnam stored 220 million passenger and crew records, including names, passport numbers, dates of birth, nationalities, and flight details from 2017 to 2026. Researchers gained access to the cloud-based system using default credentials.

Why it matters: Airlines, airports, and governments relying on this APIS infrastructure face identity theft and fraud risk for hundreds of millions of travelers; practitioners should audit APIS deployments for default credentials and access controls immediately.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary