The HOCMAI hack incident: Warning of 7 million leaked data records and immediate actions to take
Recently, cyberspace has been buzzing with news that the online education platform HOCMAI was hacked, raising concerns about the information security of millions of students. Below is a comprehensive overview of the incident and the urgent solutions users need to implement to protect themselves.
Origins of the suspected hack: Over 7 million data records from HOCMAI exposed on the "black market"
Rumors regarding the HOCMAI hack emerged on October 30, 2026, when an anonymous account "k4nxz" claimed on the PwnForums forum that they had obtained a massive database from this system. According to the attacker, more than 7 million user accounts were affected.
The leaked sensitive information is believed to include full names, phone numbers, Identity cards, emails, home addresses, and login passwords in the form of MD5 hash (MD5 hash). Notably, this hacker affirmed they were a former student here and had found their own personal information in the stolen dataset.
Official response and mitigation measures from the system
Facing public pressure, on November 1, 2026, the governing entity officially confirmed that the system had been accessed illegally from the outside. Although specific details regarding the actual number of affected accounts have not been disclosed, a system representative stated that the technical team had immediately intervened, successfully contained the incident, and is actively cooperating with authorities to investigate and clarify the matter.
Urgent account protection measures against phishing risks
To prevent the leaked data from being exploited by malicious actors, this platform advises users to proactively implement the following measures immediately:
Change passwords: Visit the official website to change to a new password. If you are sharing this password for other services (such as banking, email), change them all simultaneously and enable two-factor authentication (2FA).
Increase vigilance: Malicious actors can use the collected data to accurately read your full name and course history to build trust. Absolutely do not provide OTP codes or transfer money to anyone claiming to be customer care staff.
Be cautious with strange links: Do not click on links of unknown origin, even under the guise of "system troubleshooting support".
Security lessons for enterprises and solutions from IPSIP Vietnam
This data leak incident is a costly lesson for online platforms holding sensitive information. Establishing a robust security system is no longer a choice, but a vital requirement.
To proactively block threats early on, enterprises can partner with specialized information security units like IPSIP Vietnam. With over 15 years of experience and international certifications (ISO 27001:2022, SOC 2 Type II), IPSIP helps organizations build a comprehensive security "shield". Instead of waiting for an incident to occur, enterprises can proactively assess vulnerabilities through Penetration testing (PENTEST), maintain Continuous 24/7 security monitoring (SOC 24/7) to respond instantly, and simultaneously conduct information security awareness training to turn every employee into a solid checkpoint from the inside.
Reference: Cybersecurity Magazine - Suspicions of over 7 million HOCMAI accounts hacked
