SBV Flags Undetected Bank Hacks as TPBank Runs 99.5% Digital

Overview

State Bank of Vietnam (SBV) Deputy Governor Pham Tien Dung told the Smart Banking conference on 22 October that hackers have penetrated several Vietnamese banks and stayed inside their systems for months without detection. The warning lands directly on TPBank (TPB, HOSE), whose chief executive said 99.5% of the bank’s transactions now run through digital channels, making security monitoring a core operating cost rather than a compliance afterthought.

Key Facts

• SBV Deputy Governor Pham Tien Dung spoke at the Smart Banking conference on 22 October.
• The banking system processes roughly 100 million payment transactions per day, valued at about VND 1.2 quadrillion.
• Dung said hackers remained inside some bank systems for “many months” before detection.
• In the cited cases, hundreds of anomalous transactions worth tens of billions of dong occurred overnight before business units reacted.
• The SBV has instructed credit institutions to establish a separate transaction-surveillance unit alongside existing cybersecurity monitoring.
• TPBank CEO Nguyen Hung said 99.5% of the bank’s transactions are digital, spanning hundreds of millions of transactions per month.
• Dung said many banks now conduct over 95% of transactions through digital channels.
• TPB closed at VND 12,750 on 22 October 2026.

What Happened

Speaking at the Smart Banking event in Hà Nội, Deputy Governor Pham Tien Dung framed cybersecurity as a business-continuity issue rather than a technical one. He described incidents in which attackers entered bank systems and remained undetected for months, with the breach only surfacing when hundreds of unusual transactions worth tens of billions of dong were executed in the middle of the night. Even then, according to Dung, operational teams did not respond promptly. The remarks were reported from the conference and represent the SBV’s public position rather than a formal enforcement notice.

Dung asked lenders to invest seriously in safety-monitoring systems instead of concentrating solely on perimeter defence, and to build resilience spanning early detection, rapid response, continuity of essential services and recovery. The SBV has separately required credit institutions to set up a dedicated transaction-surveillance function distinct from the cybersecurity monitoring system. TPBank’s Nguyen Hung, speaking at the same event, said artificial intelligence is the next wave after digital banking but also gives bad actors more sophisticated tools against financial systems.

Market Context

TPB trades on HOSE and closed at VND 12,750 on 22 October 2026, the day of the conference. Vietnamese banks have pushed digital adoption rapidly, with the SBV citing more than 95% digital transaction shares at many lenders, and TPBank among the most digital-heavy franchises in the sector. The disclosure does not name affected institutions, so the immediate read-through is sector-wide operating cost rather than an institution-specific event. Banking stocks have broadly traded on credit growth, net interest margin and asset-quality signals; cyber-resilience spending adds a slower-moving cost line that is unlikely to move TPB on its own but compounds across the sector.

Strategic Significance

For long-term holders, the signal is that Vietnamese banks are entering a phase where security and fraud-monitoring spend scales with digital volume, not with branch count. TPBank’s 99.5% digital mix means its cost base is already tilted toward technology, and a regulatory push for separate transaction-surveillance teams adds headcount, systems and vendor spend that will show up in operating expenses before it shows up in revenue. The competitive angle cuts both ways: banks that build credible detection and response can differentiate on trust and win deposit and payment share, while a publicised breach at any large lender would hit sector-wide confidence in digital channels. The SBV’s parallel guidance on responsible AI deployment suggests supervision will extend to model risk, not just network defence.

What to Watch

• Any SBV circular or directive formalising the dedicated transaction-surveillance requirement, with timelines and capital expectations.
• TPBank’s next quarterly disclosure on operating expenses and technology investment, and whether management quantifies security spending.
• Disclosure of the specific banks affected in the cited incidents, which the article does not name.
• SBV guidance or a circular on responsible AI deployment by credit institutions.
• Sector-wide digital transaction share data and any change in fraud or chargeback statistics.