evn.com.vn Listed by stormous Ransomware Group

EVN.com.vn, Vietnam’s state-owned electricity monopoly serving more than 19 million customers, appeared on the Stormous ransomware group’s leak site on 21 December 2023. The listing states that internal files were exfiltrated during a ransomware attack; the exact number of records and the full scope of data remain undisclosed by both the threat actor and the company.

Reported Details from the Listing

The Stormous leak page, still accessible via the .onion link hosted on ransomware.live, claims successful data theft from Vietnam Electricity (EVN). It describes the incident as a ransomware attack in which internal files were taken. No sample data is publicly shown, no ransom amount is listed, and no deadline for publication is displayed. The disclosure indicates that EVN was added to the group’s victim gallery on 21 December 2023 but provides no technical indicators of compromise or proof-of-exfiltration beyond the group’s own assertion.

Why This Matters for You and Your Family

When a national power utility is breached, the ripple effects reach every household it serves. EVN holds billing records, service addresses, meter data, payment histories, and likely copies of national ID numbers or tax identifiers for millions of Vietnamese families. Even though the listing does not quantify affected records, any leakage of this information increases the chance that criminals can link your home address, electricity usage patterns, and financial details to other personal data already circulating. For ordinary families this translates into higher risk of targeted scams, fraudulent utility claims, or identity theft that can disrupt credit, loans, or government services tied to your household.

The Doxxing and Identity-Chain Risk

Utility breaches rarely stop at one dataset. Attackers routinely combine leaked customer files with credentials from earlier breaches, social-media handles, and children’s online gaming accounts that share the same family email or phone number. Once an address and national ID appear, threat actors can map an entire household profile within hours. This creates persistent doxxing chains: a criminal who obtains your EVN billing record today can later pivot to your child’s Roblox or Minecraft account, reset the password, and demand payment or further personal details. The exposure therefore extends far beyond “just” power-company data and can fuel long-term identity abuse.

Stormous Group Track Record

Public reporting attributes Stormous with emerging in early 2022 as a self-described hacktivist-ransomware hybrid. The group has targeted government agencies, energy providers, and educational institutions across the Middle East, Europe, and Southeast Asia. Its typical playbook begins with opportunistic initial access—often through compromised VPN credentials or unpatched web applications—followed by exfiltration of internal documents before encryption. Stormous then leverages dual extortion: threatening both data publication on its leak site and operational disruption. While some researchers question the group’s technical sophistication compared with larger ransomware operations, its willingness to name national infrastructure victims makes every listing noteworthy.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses, and online handles that may have been exposed in the EVN breach.
• Rotate any password you ever used on evn.com.vn or related EVN portals and enable 2FA through an authenticator app everywhere that same password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next credential leak that touches your family is caught and acted on quickly.
• Cover the household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same breached utility records.
• Let DoxxScan remediation specialists handle ongoing takedown requests for any personal data appearing on broker sites or forums linked to this incident.

The EVN breach is a reminder that even essential national services can become gateways to personal exposure. One timely scan and a few password changes can break the chain before criminals combine this utility data with other leaks already circulating. Start your DoxxScan trial today and gain both immediate visibility into your exposure and hands-on help from specialists who manage these threats for you and your family.