10th Grader Hacks National Vaccination System, Sells 20 Million Personal Records

News.Tuoitre.Vn

10th Grader Hacks National Vaccination System, Sells 20 Million Personal Records

First seen 11 Jun 2026, 08:15 UTC • •66.0

Article Content

1 / 3

Browse articles

ThreatCluster •June 12, 2026 at 08:08 UTC

•A 10th-grade student hacked the National Immunization Information System.
•Nearly 20 million personal records were stolen and sold for over 100 million VND.
•Authorities are urging improved cybersecurity measures to prevent future breaches.

On June 5, 2026, a 10th-grade student from Nghe An Province was prosecuted for illegally accessing the National Immunization Information System. The student, N.H.A., exploited security vulnerabilities to collect and sell nearly 20 million personal records, earning over 100 million VND. The investigation revealed that he self-taught programming and used online resources to develop algorithms for the hack. Authorities emphasized the serious threat this poses to privacy rights and warned of potential fraud risks. The police have initiated measures to strengthen cybersecurity and prevent similar incidents. Legal consequences for such actions include fines and imprisonment under Articles 288 and 289 of Vietnam's Penal Code. The case highlights the need for better education on cybersecurity and legal implications among youth.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 101d ago How this analysis works

Timeline

2026-06-05

Student prosecuted for hacking

N.H.A. was charged with illegally accessing the vaccination system and selling personal data.

2026-06-05

Investigation launched

Cybersecurity officials discovered accounts selling large volumes of personal data, prompting an investigation.

News.Tuoitre.Vn

2026-06-11

Police announce findings

Authorities reported the student sold nearly 20 million records and earned significant illicit profits.

News.Tuoitre.Vn

More articles in this cluster (2)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Data Breach
T1041 - Exfiltration Over C2 Channel

Organization (1)

Ministry Of Health

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Malware (1)

Love

Relationships

Love targets Ministry Of Health
Love related to Data Breach
Love related to CWE-200 - Exposure of Sensitive Information
Love related to T1041 - Exfiltration Over C2 Channel

Following this threat?

Track Love and Ministry Of Health in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…