Ransomware attack took Vietnam Post's delivery systems offline

Vietnam Post, the state-owned national postal operator, was hit by ransomware at about 3:10 a.m. on June 4, 2024. The attack encrypted data and directly disrupted the company's postal delivery operations.

All websites using the vnpost.vn domain and the associated mobile applications were interrupted. Online sellers who depended on the service reported being unable to create orders or use the app. Vietnam Post said its postal finance, public administration and goods distribution services continued to operate normally.

The operator said it activated its incident response plan as soon as the attack was detected, cutting connections to its IT systems to isolate the threat and protect data. It contacted Vietnamese security authorities and worked with government agencies and domestic technology firms on recovery. Services were restored after several days of downtime.

Vietnam Post did not identify the group responsible and did not say whether a ransom was demanded. The attack came during a run of ransomware incidents against large Vietnamese organisations that began in March 2024 and had already affected the securities broker VNDirect and the fuel retailer PVOIL. Vietnam recorded more than 13,900 cyber incidents in 2023, about 10 percent more than the year before.