Incident

Vietnamese tech giant CMC confirms ransomware attack on subsidiary


Learn More

CMC, a major Vietnamese technology corporation, has confirmed reports of a ransomware attack affecting its operations. 

CMC Vietnam, or CMC Corporation, is the second-largest information and communication technology (ICT) company in Vietnam, established in 1993. It specializes in technology solutions, telecommunications, and global business services, aiming to enhance Vietnam's position in the global tech market.

On April 15, 2025 a company representative clarified that the cyberattack targeted and was limited to a specialized service provided by a medium-sized subsidiary to a small group of clients. The company claims that all core systems and services across its main business units remain unaffected and continue to operate safely and stably.

The company isolated the attack source and regained control within 24 hours. Service interruption was reportedly brief, with complete restoration achieved and no ongoing impact on customer experience.

Following containment and resolution of the incident, CMC notified affected customers and relevant partners via email, providing details about the incident and its resolution.

The types of exposed data and number of affected individuals is not disclosed.

CMC is collaborating with government authorities to conduct a thorough investigation into the incident. The company has stated that once official findings are finalized and approved, they will provide complete information to the press, customers, and partners.

Vietnamese tech giant CMC confirms ransomware attack on subsidiary