EVN.com.vn, Vietnam’s state-owned electricity monopoly serving more than 19 million customers, appeared on the Stormous ransomware group’s leak site on 21 December 2023. The listing states that internal files were exfiltrated during a ransomware attack; the exact number of records and the full scope of data remain undisclosed by both the threat actor and the company.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch evn.com.vn
Get alerted the next time evn.com.vn files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about evn.com.vn’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Listing
The Stormous leak page, still accessible via the .onion link hosted on ransomware.live, claims successful data theft from Vietnam Electricity (EVN). It describes the incident as a ransomware attack in which internal files were taken. No sample data is publicly shown, no ransom amount is listed, and no deadline for publication is displayed. The disclosure indicates that EVN was added to the group’s victim gallery on 21 December 2023 but provides no technical indicators of compromise or proof-of-exfiltration beyond the group’s own assertion.
Why This Matters for You and Your Family
When a national power utility is breached, the ripple effects reach every household it serves. EVN holds billing records, service addresses, meter data, payment histories, and likely copies of national ID numbers or tax identifiers for millions of Vietnamese families. Even though the listing does not quantify affected records, any leakage of this information increases the chance that criminals can link your home address, electricity usage patterns, and financial details to other personal data already circulating. For ordinary families this translates into higher risk of targeted scams, fraudulent utility claims, or identity theft that can disrupt credit, loans, or government services tied to your household.
The Doxxing and Identity-Chain Risk
Utility breaches rarely stop at one dataset. Attackers routinely combine leaked customer files with credentials from earlier breaches, social-media handles, and children’s online gaming accounts that share the same family email or phone number. Once an address and national ID appear, threat actors can map an entire household profile within hours. This creates persistent doxxing chains: a criminal who obtains your EVN billing record today can later pivot to your child’s Roblox or Minecraft account, reset the password, and demand payment or further personal details. The exposure therefore extends far beyond “just” power-company data and can fuel long-term identity abuse.