TWSE Expands Cybersecurity Incident Disclosure Scope for Listed Companies Regardless of Core System or Confidential Data Involvement

According to iThome, the materiality threshold for cybersecurity incident filings by listed companies has changed: the Taiwan Stock Exchange (TWSE) revised Clause 26 of its Material Information FAQ to require listed companies that discover a hacker attack or intrusion to issue a material information disclosure regardless of whether core IT systems or confidential documents are involved, as all such incidents are now deemed to cause significant damage or impact ^[1]. TWSE had only introduced explicit materiality guidelines for cybersecurity incidents in January of this year to clarify over two years of ambiguity among enterprises, making this revision just four months later notable ^[1]. Announced on May 28, TWSE's revised Clause 26 urges listed companies experiencing a cybersecurity incident to assess the scope of damage or impact in accordance with regulations and faithfully follow material disclosure procedures ^[1].

Industries mainly affected: Cross-industry

Announced on May 28, TWSE's revised Clause 26 urges listed companies experiencing a cybersecurity incident to assess the scope of damage or impact in accordance with regulations and faithfully follow material disclosure procedures .