According to iThome, on September 23, listed fitness service company Power Wind Health Industry (8462) issued a material announcement on the Market Observation Post System (MOPS), stating that an outsourced system vendor notified the company of an automated attack against its external service system in which hackers attempted paginated scraping of customer database tables, partially involving personal data of Power Wind employees and members [1]. Upon notification, the company activated its response procedures and reported the incident to relevant regulatory authorities; preliminary assessments indicate no material impact on company operations [1]. The announcement specifically noted that to prevent personal data misuse from causing customer losses, Power Wind has issued anti-fraud advisories across multiple channels, including its corporate website, Facebook, Instagram, and member app [1].
Power Wind's outsourced public system faced an automated attack that tried to page through staff and member data
1 min read
- Disclosed
- Sep 24, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 10, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Cross-industry
What to do nowOur advice
The announcement specifically noted that to prevent personal data misuse from causing customer losses, Power Wind has issued anti-fraud advisories across multiple channels, including its corporate website, Facebook, Instagram, and member app
Timeline
- Media reports on this cybersecurity incident[1]
Technical details
Source-Supported Details
Source excerpt: "The announcement specifically noted that to prevent personal data misuse from causing customer losses, Power Wind has issued anti-fraud advisories across multiple channels, including its corporate website, Facebook, Instagram, and member app." [1].
References
Media1
- [1]
“這則重訊特別提及,為防範個資遭到濫用而導致客戶遭受損失,柏文已透過多種管道進行反詐騙宣導,這些管道是:公司網站、臉書、Instagram,以及會員App。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.