220 million traveler records exposed in Vietnam-linked APIS leak
An exposed Advance Passenger Information System database has leaked over 200 million records containing sensitive passenger and crew details.
According to an exclusive report by BleepingComputer, a massive security lapse has exposed an Advance Passenger Information System (APIS) database linked to Vietnam, putting hundreds of millions of travelers at risk.
The exposed database held an staggering 220 million passenger and crew records spanning from 2017 to 2026. The compromised information included full names, passport numbers, dates of birth, nationalities, and specific flight details.
Researchers were able to access the system through a cloud-based path simply by using default credentials, highlighting a critical failure in basic cybersecurity hygiene and access management.
This incident serves as a stark reminder for tech and aviation sectors globally, including emerging digital markets, about the vital importance of securing cloud infrastructure and properly configuring default settings.
As investigations continue, cybersecurity experts emphasize that safeguarding large-scale travel databases is crucial to maintaining public trust and preventing identity theft on an international scale.
