Cybersecurity
Apr 18, 2025
Sep 15, 2025
•
2 min read
If you had a busy weekend, you were not alone. Cyberthreats were busy as ever with breaches. This is what you missed since Friday, September 12.
Vietnam’s National Credit Information Center Breach
As we mentioned on Friday, Vietnam is investigating a cyberattack against its National Credit Information Center (CIC), part of the State Bank, which holds sensitive creditor data including personal details, credit history, and risk analyses. The attack appears to show signs of unauthorized access, with suspected involvement of the hacker group Shiny Hunters, known for previous big data breaches. Systems are said to be still operational, with no reported service disruption. Systems are said to be still operational, with no reported service disruption.
→ Read more on Reuters.
Ransomware Attack Shuts Down Uvalde CISD (Texas School District)
A ransomware attack forced the Uvalde Consolidated Independent School District in Texas to cancel classes from September 15-18. The attack impacted multiple essential systems — phones, AC controls, security cameras, visitor management, and the Skyward system (used for school operations). The district is working with the FBI and cybersecurity insurance/response teams, and it is unclear whether student/staff data was compromised. The focus so far is on restoring operational readiness and securing systems.
→ What you need to know: MySA.
Key Takeaways
- - Data breach attribution matters.
The Shiny Hunters group being named in the Vietnam incident highlights how some threat actors consistently pop up in these large scale credential/data thefts. Monitoring for their tactics, and understanding their patterns, can improve detection & prevention. - - Disruption beyond data loss.
The Uvalde CISD ransomware attack shows that attacks aren’t just about stealing data — entire operational ecosystems can be shut down. Schools depend on so many interconnected systems and the Internet of Things, (HVAC, cameras, visitors, classrooms etc.) that an attack on one vector cascades quickly. - - Resilience & incident response remain critical.
These stories show that having a solid incident response plan, ability to restore operations fast, and strong backup / recovery processes are as important as prevention. - The weekend is only two days long, but those 48 hours can change the course of a business. Don’t leave your network vulnerable — protect your networks and teams with OpenVPN.
