Home / Incidents / Data breach
Misconfigured database exposes 220 million airline passenger records
Nine years of passport and flight details were left open.
- Organisation
- Vietnam APIS
- Disclosed
- 8 September 2026
- Affected
- 220,000,000
- Data
- Names, passport numbers, flights
- Attacker
- None (exposure)
- Severity
- critical
- Region
- Global
- Source
- CM Alliance monthly roundup ↗
Cite this
Nuffield Consulting, “Misconfigured database exposes 220 million airline passenger records”, The Daily Tech Wire outage & breach log, 8 Sep 2026. https://techwire.nuffieldconsulting.com/incidents/2026-09-08-vietnam-apis-breach/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: CM Alliance monthly roundup, https://www.cm-alliance.com/cybersecurity-blog/major-cyber-attacks-data-breaches-ransomware-attacks-september-2026.
Related incidents
- 30 Sep 2026Pentagon personnel system breach exposes 3 millionUS DoD (DMDC) · breach · Unknown · 3.1M records
- 30 Sep 2026Times Car Rental breach hits 6.6 million accountsTimes Car Rental · breach · Unknown · 6.6M records
- 24 Sep 2026Bitget hack steals $387.5M in cryptoBitget · breach · Suspected North Korea
- 18 Sep 2026Gyazo breach exposes 23.6 million usersGyazo · breach · Unknown · 23.6M records
- 10 Sep 2026IDScan driver's licence records stolen, 150M+ reportedIDScan · breach · Unknown · 150M claimed