Nam Dinh Vu Port Data Breach

N0n claimed Nam Dinh Vu Port, a Vietnamese port operator, on its dark web portal on October 12, 2026. This listing is one of 72 victim claims N0n made over the preceding 60 days, with Transportation and maritime infrastructure at the core of that campaign. The decision for the organization’s leadership is not whether to investigate — it’s how fast. N0n’s campaign ran heaviest in Transportation, Technology, and Healthcare, with the US, South Korea, and Brazil as the primary target geographies. Vietnam’s growing role in regional maritime trade puts its port operators firmly in scope. The same 60-day window captured Ocean Network Express (SG, Transportation), CULines (CN, Transportation), T.S. Lines (TW, Transportation), and ZPMC (CN, Manufacturing) — a deliberate sector sweep, not coincidence.

Stealer-log queries against Nam Dinh Vu Port’s domains returned no results. This is a bounded query result, not a clean bill of health. Credentials may exist in regional markets or under domains not covered by the query scope, and stealer-log coverage for Vietnamese operators is thinner than for US or Western European targets. The null result reduces one risk vector; it doesn’t retire the listing as an operational concern. A group claiming 72 victims in 60 days with a clear maritime focus is not random. N0n’s known access method runs through harvested credentials for VPN gateways, SSO systems, and remote-access portals — entry points that bypass perimeter defenses when MFA isn’t enforced. Reviewing authentication logs for anomalous access and enforcing phishing-resistant MFA on remote-access systems are the first-line responses.