Mat Bao Corporation data allegedly leaked by Rhysida ransomware group

• Ransomware group: Rhysida
• Country: Vietnam
• Sector: Technology
• Announcement date: October 2, 2026

Rhysida claims to have stolen data from Mat Bao Corporation

The Rhysida ransomware group has published a listing on its leak site claiming responsibility for a data breach targeting Mat Bao Corporation. According to the announcement made on October 2, 2026, the threat actor group claims to have acquired a significant volume of sensitive information belonging to the Vietnamese technology firm. This development follows the common pattern of ransomware groups using public leak sites to exert pressure on their victims.

The group claims to have exfiltrated a total of 106.8 GB of data. The volume of the stolen information is substantial, with the group asserting that the cache includes approximately 746,108 files. This incident highlights the ongoing threat posed by ransomware operations that utilize double-extortion tactics, where stolen data is threatened with public release to increase the likelihood of a ransom payment.

Details of the allegedly compromised data

The information released by the Rhysida group suggests a wide-ranging compromise of both corporate and personal records. The group claims that the stolen data includes a variety of sensitive documents that could impact the organization's operations and the privacy of its stakeholders. The specific categories of data allegedly compromised include:

• Government inspection documents
• Corporate records
• Shareholder records
• Tax documents
• National ID cards (CCCD)
• Employee passports
• Staff lists
• Regulatory correspondence
• Operational emails

The inclusion of such diverse data types—ranging from internal operational emails to highly sensitive personal identification like national ID cards and passports—indicates a deep level of access into the organization's digital environment, according to the group's claims.

About Mat Bao Corporation

Mat Bao Corporation is a technology company based in Vietnam. The organization provides a variety of digital services, including domain registration, cloud hosting, professional email solutions, and cloud server storage. Given its role in providing infrastructure and communication services, the company serves as a central hub for various digital operations.

Potential impact and organizational risks

The alleged breach of Mat Bao Corporation carries significant implications for the organization and its stakeholders. The disclosure of such sensitive information may lead to secondary risks, including identity theft and targeted phishing attacks directed at employees and stakeholders. Furthermore, the exposure of correspondence with regulatory bodies and government inspection documents could negatively affect the company's operational confidentiality and its legal compliance processes.

The use of the double-extortion method by the Rhysida group means that the public release of stolen data can cause significant reputational damage. Additionally, claims regarding technical infrastructure and encryption vulnerabilities may lead to increased scrutiny of the company's internal security processes. Within the legal framework of data protection regulations in Vietnam, the organization is likely to face potential legal liabilities resulting from this incident.

In the broader context of cybersecurity, organizations in the technology sector often face heightened risks due to the sensitive nature of the data they host. To defend against such threats, organizations typically implement multi-layered security strategies. Common defensive steps include maintaining robust, offline backups to ensure data availability, implementing strict identity and access management (IAM) to limit lateral movement, and employing continuous monitoring to detect unauthorized data exfiltration. Furthermore, regular security audits and employee training on phishing awareness are standard practices used to mitigate the risks of initial access and subsequent data theft.