They finally sent an email:
Vietnam Airlines would like to inform you of a recent data breach involving a third-party customer service platform operated by a global technology partner. According to the service provider, Vietnam Airlines is among several global companies using its services that have been affected by this incident. A portion of customer data managed on this platform was accessed without authorization.
Upon being alerted, we took appropriate actions to coordinate with relevant authorities, cybersecurity experts, and the third-party partner to investigate the breach, assess potential impact and contain further unauthorized access to its system.
Some personal information may have been exposed, including full name, email address, phone number, date of birth, and Lotusmiles membership number. At this time, data such as payment information, passwords, travel itineraries, Lotusmiles balances, and passport details remain secure. Additionally, Vietnam Airlines’ internal IT systems were not affected.
To help protect your personal data, we recommend changing the passwords of your Lotusmiles and associated email accounts, staying alert to potential phishing attempts, suspicious emails or phone calls impersonating Vietnam Airlines, and avoid sharing information, one-time passcodes (OTPs), or login credentials with unverified sources.