Atunas says its outsourced website database was hit by an automated attack after customers reported possible data leaks

According to iThome, on October 22, emerging stock outdoor apparel and mountaineering gear company Atunas (2940) issued a cybersecurity material announcement on the Market Observation Post System (MOPS), stating that the database of its outsourced service platform vendor suffered an automated attack in which partial information was unlawfully scraped, and that consumers reported suspected personal data leakage the same day ^[1]. Upon learning of the incident, Atunas immediately activated its cybersecurity incident response mechanism and contacted the outsourced vendor to clarify the actual scope of impact on the company, with the cause and potential impact still under investigation ^[1]. Regarding follow-up actions, Atunas stated that because the official website platform involved is operated and managed by the outsourced vendor, the company has required the vendor to simultaneously conduct a security review and implement necessary security hardening measures ^[1].

Industries mainly affected: Cross-industry

Regarding follow-up actions, Atunas stated that because the official website platform involved is operated and managed by the outsourced vendor, the company has required the vendor to simultaneously conduct a security review and implement necessary security hardening measures