Vietnam Airlines · Breach

The Gentlemen Ransomware Claims Data Theft at Vietnam Airlines

Oct 26, 2026 · 1 min read

The Gentlemen ransomware group added Vietnam Airlines to its leak site on Oct 26, 2026. The airline has not confirmed the incident, the claim has not been independently verified, and no details on the volume or type of data have been shared. Await official confirmation and warn customers about airline-themed phishing, fake refund calls and OTP scams.

By HIFY Radar newsroom Updated 10/26/2026 01:41 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

The Gentlemen ransomware group added Vietnam Airlines to its leak site on Oct 26, 2026, claiming data theft. The airline has not confirmed the incident and the claim has not been independently verified. No details on the volume or type of data have been shared.

Why it matters

If confirmed, passenger, Lotusmiles loyalty and operational data could be exposed, data volumes typical of airlines according to DailyDarkWeb. Customers would face airline-themed phishing, fake refund calls and one-time password scams. Vietnam Airlines is Vietnam's flag carrier, majority state-owned, a SkyTeam member with a fleet of about 100 aircraft.

What to do

Wait for official confirmation from Vietnam Airlines and do not treat the claim as fact. Warn customers and Lotusmiles members about airline-themed phishing, fake refund calls and OTP scams. Tighten verification of refund and booking communications.

For the technical team

Affected: Vietnam Airlines (dados corporativos, segundo o grupo The Gentlemen) · Vietnam Airlines. Data type and volume not disclosed by the group. No specific system or version cited in the sources.
Exploitation: Listing on The Gentlemen ransomware group's leak site on Oct 26, 2026 (UTC), reported by DailyDarkWeb. No sample, no PoC and no details on the alleged data. Unverified claim with no confirmation from the victim.
Fix: Not applicable: alleged data leak, no software flaw or patch cited in the sources.
More details: Vietnam Airlines previously disclosed a customer data breach in Oct 2025 linked to a third-party customer service platform, according to DailyDarkWeb. DailyDarkWeb classifies the listing as an unverified threat-actor claim, not confirmation of a breach. The airline operates from hubs in Hanoi and Ho Chi Minh City.