Personal Information Leaked Online: What Should We Do?

Particularly for those using smartphones, when accessing the internet or running any applications and utilities, they inadvertently open the door for certain types of malware intrusions. 2016 saw an explosion of malware that steals information on mobile phones. The "thief" in question is none other than the Trojan—a type of malware specialized in stealing information. Statistics indicate that, on average, over 7,000 new lines of information-stealing malware emerge daily worldwide, comprising 35% of the total number of malware lines on mobile phones identified each day.

According to research by Bkav, Trojan malware lines are often embedded by hackers inside a utility application or a popular game to disseminate. Users find it very difficult to detect because while the application continues to function normally, the malware silently steals information and sends it out. The information collected by the Trojan includes personal details such as messages, contacts, calls, or more dangerously, passwords, bank accounts, and other sensitive data on the phone. When these details fall into the hands of malicious entities, they use them to trade for profit. The sale of personal information is an illegal act, infringing on others' privacy.

Article 38 of the Civil Code 2015 stipulates:

... 2. The collection, storage, use, and disclosure of information related to private life and personal secrets must be consented by the individual, while the collection, storage, use, and disclosure of information related to family secrecy must be consented by all family members, except where otherwise provided by law....

Article 22 of the Information Technology Law 2006 stipulates:

"1. Individuals have the right to request organizations and individuals storing their personal information in an online environment to carry out checks, corrections, or deletion of such information; 2. Organizations and individuals are not allowed to provide personal information of others to third parties, except where otherwise provided by law or with the individual's consent; 3. Individuals have the right to claim damages for violations in providing personal information."

Anyone who uses another person's personal information for profit may be subject to administrative penalties under Article 65 of Decree 185/2013/ND-CP with a fine ranging from 10 to 40 million VND.

Additionally, the act of trading personal information, infringing on the privacy of others, may be subject to criminal prosecution under Article 125 of the Criminal Code 1999.

So, what should we do when our personal information is exposed?

According to Mr. Tran Quang Chien, Director of VNIST company, when discovering that their information has been exposed, users should contact security experts or security service companies for the fastest support in handling the incident.

Experts suggest that with the current spread rate, once information has been exposed, recovery is challenging. Therefore, upon detecting an incident, users need to review their system, identify vulnerabilities, and implement technical solutions to prevent future risks. For lost information, it is crucial to quickly deactivate it to minimize the impact on oneself and others involved.

To ensure safe use and interaction on social networks, users should equip themselves with basic cybersecurity knowledge and be extremely cautious when entering their personal information on forums, websites, etc., especially on e-commerce websites or when accessing and downloading applications and software on mobile devices.

>> CLICK HERE TO READ THIS ARTICLE IN VIETNAMESE