Manifesting the first line of defence in cybersecurity
Vietnam faced a sharp rise in cyber threats during the third quarter of 2024. Over 547,000 AI-assisted Distributed Denial of Service (DDoS) attacks struck the country, while stolen personal accounts surged by 64%. Despite government efforts to strengthen digital defences, businesses and individuals remain vulnerable to evolving risks.
Between July and September 2024, cybercriminals leaked more than 502 million enterprise data records in Vietnam. At the same time, nearly 4,000 phishing domains were detected, targeting unsuspecting users. The theft of over 6.5 million personal accounts marked a 64% increase from the previous quarter, highlighting the growing scale of digital breaches.
Social engineering emerged as the leading human-related threat, with 80% of organisations identifying it as their top concern. Even advanced security systems can fail if employees mishandle sensitive data or neglect proper authentication. Experts stress that human behaviour—awareness, knowledge, and vigilance—remains the first line of defence against attacks.
The Vietnamese government has taken steps to bolster cybersecurity, including passing an artificial intelligence law in June 2025. Since 2021, 91 decrees have been implemented to drive digital transformation, while plans for data-driven government systems and a national digital market are underway. However, a shortage of specialised cybersecurity professionals, particularly in finance and blockchain, persists. Authorities are now pushing for at least 10% of IT budgets to be allocated to security measures.
Despite these efforts, only about 10% of Vietnamese enterprises have mature incident response capabilities. This gap leaves many organisations exposed to sophisticated threats, from AI-powered attacks to basic human errors.
The surge in cyber incidents underscores the need for stronger defences in Vietnam. With leaked records, stolen accounts, and phishing attempts on the rise, both businesses and the government must prioritise training and investment. The success of future cybersecurity measures will depend on closing skill gaps and reinforcing human and technical safeguards.
