Power Grid
EVNHANOI — Emperador ransomware group claims customer-data theft
Leak-site claim published 22 August 2026
Hanoi, Vietnam (corporate marker; no affected facility identified)
Map
21.0300, 105.8400
What happened
The Emperador ransomware/extortion group listed Hanoi Power Corporation (EVNHANOI), the Hanoi distribution subsidiary of state-owned Vietnam Electricity, and claimed to have stolen more than 300 GB of customer, subscription and account data. Ransomware monitors captured the listing, but no statement from EVNHANOI, EVN, a Vietnamese regulator or a national cyber authority confirmed the intrusion, data volume or record counts. No encryption, operational-technology access, grid-control impact or electricity outage was reported. The claim applies to the Hanoi distribution subsidiary, not EVN's nationwide generation and transmission systems; the corporate marker must not be read as evidence of national-grid compromise.
When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.
- Evidence
- Unconfirmed
- Confidence
- Unverified
- Infrastructure
- Power Grid
- Current temperature
- Loading…
- Latitude
- 21.0300°
- Longitude
- 105.8400°
Attribution
Claimed by Emperador ransomware group
The claim originates from Emperador's criminal leak site and secondary monitoring services. EVNHANOI, parent company EVN and Vietnamese authorities had not publicly confirmed it when this record was added.
Sources
- EVNHANOI: Emperador Ransomware Data Extortion ClaimWasteland threat-intelligence analysis · Incident reporting
- Ransomfeed ransomware listing dashboardRansomfeed · Independent tracker entry for the 22 August Emperador listing; not victim confirmation
- EVNHANOI: Capital's power grid is becoming smarterVietnam Electricity · Official subsidiary and grid-service context only; not confirmation of the ransomware claim