On March 27, after more than 3 days of cyber attacks causing disruptions to transactions, VNDIRECT Securities Joint Stock Company said it had restored the system and was reviewing and evaluating the system to ensure absolute safety and security for customers trading at the company.

In a new announcement on its website, VNDIRECT also informed about the roadmap to reopen the system in 4 phases, including: Phase 1 - The system can look up the status and information of customers' accounts on My Account; Phase 2 - Reopen the system for money transactions, basic securities transactions and derivatives on the basis of communication with the Exchange; Phase 3 - Other financial products come back into operation; Phase 4 - All other features.

vndirect new announcement 1 2.jpg
On the company's website, VNDIRECT announced a roadmap to reopen the system in 4 phases. Screenshot at 1:00 p.m. on March 27.

With VNDIRECT completing phase 1 of the above roadmap, investors participating in transactions through the securities company's system can now check their balances on the "My Account" system. Notably, VNDIRECT recommends that users change their passwords immediately after logging into the system.

In addition, we would like to inform investors about the possibility of errors due to the newly restored system and the possibility of a large number of customers accessing it. VNDIRECT recommends that customers wait and reload the page at another time. The specific time to open the VNDIRECT system in the remaining 3 phases will be informed to customers in the next announcements.

On the morning of March 27, through the Zalo group, in addition to informing investors about the system opening roadmap, VNDIRECT also shared: In the process of overcoming the cyber attack in recent days, VNDIRECT has received unconditional support and companionship from state agencies, enterprises FPT, Viettel, Bkav and leading technology experts in Vietnam.

W-thong-bao-vndirect-1-1-1.jpg
Currently, the system to look up customer account status and information on 'My Account' has been restored by VNDIRECT. Photo: Ngo Vinh

Immediately after the VNDIRECT system was attacked, the State Securities Commission (Ministry of Finance) issued a security warning about the online securities trading system to securities companies and fund management companies. Accordingly, these enterprises were required to implement a number of contents to ensure the safe, stable and smooth operation of the stock market.

Speaking with VietNamNet reporter, Mr. Hoang Duc Hoan, expert of Information Security Monitoring Center of Vietnam Cyber ​​Security Joint Stock Company - VSEC, commented that the cyber attack on VNDIRECT system continues to be a "warning bell" for all agencies, organizations and businesses with a presence in cyberspace, especially those organizations and businesses with important information systems and storing user data.

“A cyber security incident not only affects the system of the attacked organization, but also directly affects users and partners using the system. To minimize the risk of cyber attacks, units need to implement necessary preventive measures,” said a VSEC expert.

According to VSEC experts' recommendations, in addition to protecting systems according to information security standards, organizations and businesses also need to periodically review and patch security vulnerabilities for both hardware and software of the system; use separate network infrastructure for important systems; and deploy 24/7 information security monitoring for IT systems.

VSEC experts also noted that units should pay attention to periodically backing up data for IT systems, and organize regular training and drills to raise staff awareness of knowledge and skills to ensure information security.

With VNDIRECT, experts recommend that after bringing the system back to normal operation, in addition to immediately recommending users to change their account passwords, businesses also need to focus on updating important user information on the system. In addition, businesses and organizations need to have clear and transparent policies in ensuring user information and rights in case of information security incidents.

Transferring the case of VNDIRECT system being hacked to the police VNDIRECT Securities Joint Stock Company confirmed that the system was hacked and the problem has been fixed. According to VietNamNet's own source, this case has been transferred to the police for investigation and handling.