According to iThome, on the night of October 7, medical supplies retailer MedFirst Healthcare Services (4175) issued a material announcement on the Market Observation Post System (MOPS), stating that a small number of consumers reported suspected improper acquisition of data from a website platform managed by an outsourced vendor, followed by email contact with consumers [1]. In response, MedFirst activated its cybersecurity incident response mechanism, instructed the website maintenance vendor to investigate, and strengthened anti-fraud awareness for consumers via its website and app [1]. MedFirst stated that the cause and scope of impact of the incident remain under investigation and clarification, noting no material impact on company finances or business operations to date [1].
MedFirst is investigating after customers were contacted by email, possibly with data from its outsourced website
1 min read
- Disclosed
- Oct 8, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 10, 2026
- CVSS basis
- Our assessment
- Attack vector
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Cross-industry
What to do nowOur advice
MedFirst stated that the cause and scope of impact of the incident remain under investigation and clarification, noting no material impact on company finances or business operations to date [1]
Timeline
- Media reports on this cybersecurity incident[1]
Technical details
Source-Supported Details
Source excerpt: "MedFirst stated that the cause and scope of impact of the incident remain under investigation and clarification, noting no material impact on company finances or business operations to date." [1].
References
Media1
- [1]
“對於這起事故形成的原因與影響範圍,杏一表示尚在調查及釐清,並指出截至目前為止,未對公司財務及業務造成重大影響。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.