A 16-year-old student in Nghe An Province exploited a security flaw in Vietnam's national vaccination database, stealing and reselling roughly 20 million personal records for a profit of over VND100 million (US$3,800).