220M TRAVELER RECORDS EXPOSED IN VIETNAM APIS LEAK

The exposed database contained names, passport numbers, dates of birth, nationalities, and flight details for records dating from 2017 to 2026. Researchers discovered the breach through a cloud-based access path secured only by default login credentials, highlighting a critical security gap in the travel infrastructure. APIS databases store passenger information submitted to aviation authorities ahead of flights. The scale of this exposure affects travelers globally and raises concerns about the security protocols protecting sensitive travel data. The Vietnam connection suggests the database belonged to or was linked to Vietnamese aviation operations. The breach underscores persistent vulnerabilities in systems handling high-volume personal data, particularly when default authentication mechanisms remain unchanged in production environments. No information has been provided regarding notification of affected parties or remediation efforts.