SBV Flags Undetected Bank Hacks as TPBank Runs 99.5% Digital

Overview

State Bank of Vietnam (SBV) Deputy Governor Pham Tien Dung told the Smart Banking conference on 22 October that hackers have penetrated several Vietnamese banks’ systems and remained undetected for months, urging lenders to invest seriously in security monitoring and operational resilience. The warning lands directly on TPBank (TPB, HOSE), whose chief executive said 99.5% of the bank’s transactions now run through digital channels.

Key Facts

• SBV Deputy Governor Pham Tien Dung spoke at the Smart Banking conference on 22 October.
• The banking system processes roughly 100 million payment transactions per day, valued at about VND 1.2 quadrillion.
• Dung said hackers have stayed inside bank systems for “many months” without the cybersecurity unit detecting them.
• In one described case, hundreds of anomalous transactions worth tens of billions of dong occurred overnight before business units reacted.
• The SBV has instructed credit institutions to establish a separate transaction-monitoring function alongside the cybersecurity monitoring system.
• TPBank CEO Nguyen Hung said 99.5% of the bank’s transactions are digital, running to hundreds of millions of transactions per month.
• Dung said many banks now conduct over 95% of transactions through digital channels.
• The SBV has issued a circular guiding responsible AI deployment by credit institutions.

What Happened

Speaking at the Smart Banking event on 22 October, Pham Tien Dung framed cybersecurity as a business, reputational and stability issue for credit institutions rather than a purely technical one. He described cases in which attackers entered bank systems and remained undetected for months, only becoming visible when hundreds of unusual transactions worth tens of billions of dong were executed in the middle of the night, with operational teams still not reacting. The remarks were reported from the conference; the SBV did not name the affected institutions.

Dung asked banks to invest seriously in safety monitoring rather than concentrating only on defensive perimeter protection, and to build resilience spanning early detection, rapid response, continuity of essential services and recovery after incidents. He said the SBV has required credit institutions to set up a dedicated transaction-monitoring unit separate from the cybersecurity monitoring system. TPBank’s Nguyen Hung, speaking at the same event, said AI is opening a new development wave after digital banking but can also be exploited by bad actors, making attacks on financial systems increasingly sophisticated.

Market Context

TPB closed at VND 12,750 on 22 October 2026 on HOSE, the same day as the conference. The stock trades in the low-teens range, a level at which the market is pricing Vietnamese bank shares primarily on credit growth, net interest margin and asset-quality trends rather than technology risk. Cybersecurity is not yet a line item that moves bank valuations in Vietnam, but the SBV’s public warning shifts the sector’s compliance and operating-cost baseline, and banks with the highest digital transaction share carry the most direct exposure to the operational-risk agenda Dung described.

Strategic Significance

The strategic point is that digital penetration has outrun detection capability. TPBank’s 99.5% digital share is a genuine efficiency advantage, but it also means almost the entire transaction book depends on monitoring systems that the SBV says have failed to catch intrusions elsewhere for months. For long-term holders, the relevant question is whether TPB’s technology-led franchise can convert that dependence into a defensible trust premium, or whether rising security spending and tighter SBV supervision compress the cost advantage that digital banking was meant to deliver. The SBV’s push for separate transaction-monitoring units and its AI circular signal that compliance costs across the sector will rise, favouring banks able to absorb them without denting margins.

What to Watch

• Any SBV disclosure naming affected institutions or issuing formal enforcement after the conference.
• TPBank’s next annual or interim report for disclosure of cybersecurity and IT spending levels.
• Guidance or circulars detailing the required structure of the separate transaction-monitoring function.
• TPB’s Q3 2026 earnings release for digital-channel metrics and operating-cost trends.
• Sector-wide operational-risk incident disclosures from HOSE-listed banks over the coming quarters.