NOTICE INCIDENT RELATED TO CREDIT INFORMATION AT CIC

Dear Valued Clients and Partners,

Regarding the incident involving credit information at the National Credit Information Center of Vietnam (CIC), as informed by the State Bank of Vietnam, BPCE IOM – Ho Chi Minh City Branch (“the Bank”) would like to provide the following information:

1. Credit information collected by CIC from banks in accordance with the law does not include: deposit accounts, payment accounts, debit card numbers, credit card numbers, security codes (CVV/CVC), or customers’ payment transaction history.
2. The Bank’s IT system and database operate safely and completely independently from CIC’s system. We have implemented, and continue to apply, the strictest international security standards and safeguards to protect customer data. The Bank’s services are currently being provided continuously, safely, and stably.
3. To further protect information and ensure the security of customer data and transactions, the Bank advises clients and partners to:

• Not disclose confidential information (username, password, OTP, QR code, etc.) to any third party via phone, email, social networks, or other communication channels, etc.
• Regularly monitor transaction history and account balances to promptly detect irregularities.
• Avoid clicking on suspicious links or downloading attachments from unknown sources.

If you detect any suspicious transactions, please contact your Corporate Relationship Managers immediately for timely support and resolution.

The Bank is committed to working closely with all relevant parties to safeguard customers’ assets and personal information.

Sincerely,

BPCE IOM – HO CHI MINH CITY BRANCH

Ho Chi Minh City, 16 September 2025

General Manager

Antoine GIULIANI