← Back to Feed
220 million traveler records exposed in Vietnam-linked APIS leak
September 8, 2026 · BleepingComputer · Severity: MEDIUM
Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing names, passport numbers, dates of birth, nationalities, and flight details spanning 2017 to 2026. Researchers accessed the Vietnam-linked system through a cloud-based path using default credentials.
Key Takeaways
- An exposed Advance Passenger Information System (APIS) database linked to Vietnam held 220 million passenger and crew records spanning 2017 to 2026.
- The exposed records contained names, passport numbers, dates of birth, nationalities, and flight details for travelers, creating a major identity theft and privacy risk.
- Researchers accessed the Vietnam-linked, cloud-hosted system through a cloud-based path using default credentials, highlighting weak access controls on critical travel infrastructure.