A significant security incident has emerged involving the exposure of an Advance Passenger Information System (APIS) database linked to Vietnam. Researchers discovered that this database contained 220 million records of passengers and crew members, including sensitive information such as names, passport numbers, dates of birth, nationalities, and flight details from 2017 to 2026. The researchers accessed the database through a cloud-based path, exploiting default credentials that had not been changed. This breach raises serious concerns about the privacy and security of travelers' data, as it could potentially be used for identity theft or other malicious purposes. The incident highlights the importance of securing sensitive databases and ensuring that default security measures are updated to prevent unauthorized access.