According to iThome, on October 19, apparel company Munsin Enterprise (2916) issued a material announcement on the Market Observation Post System (MOPS), stating that it recently received consumer reports of suspected personal data leakage resulting from an automated attack on a database provided by its outsourced service platform vendor, in which partial information was unlawfully scraped [1]. Following the incident, Munsin immediately contacted the outsourced platform vendor to clarify whether Munsin-related data was involved in the cybersecurity incident and determine the actual scope of affected data [1]. Munsin activated its internal incident response and investigation mechanisms and required the vendor to simultaneously conduct a security review and implement necessary protective enhancements [1].
Apparel firm Munsin asked its outsourced platform to explain an automated database attack after customers reported data exposure
1 min read
- Disclosed
- Oct 20, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 10, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Cross-industry
What to do nowOur advice
Munsin activated its internal incident response and investigation mechanisms and required the vendor to simultaneously conduct a security review and implement necessary protective enhancements [1]
Timeline
- Media reports on this cybersecurity incident[1]
Technical details
Source-Supported Details
Source excerpt: "Although Munsin did not name the outsourced service platform vendor in its material announcement, anti-fraud warning notices on the company's website indicate the incident is related to its use of the 91APP e-commerce system. Last week, e-commerce technology service provider 91APP issued a cybersecurity material announcement stating that its Commerce Cloud database suffered an automated attack in which partial information was scraped." [1].
References
Media1
- [1]
“雖然滿心並未在重訊內容提及委外服務平臺廠商的身分,但根據 該公司網站 上的反詐騙警示訊息,這起事故與他們使用的91APP電商系統有關。上週電商技術服務公司91APP 發布資安重訊 ,旗下Commerce Cloud資料庫遭受自動化攻擊,部分資訊遭到擷取。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.