According to iThome, on October 23, fitness service company Power Wind Health Industry (8462) issued a material announcement on the Market Observation Post System (MOPS), stating that the outsourced vendor for its e-commerce platform experienced a cybersecurity incident and that members reported suspected leakage of e-commerce order data [1]. The outsourced vendor's Commerce Cloud database was attacked, resulting in unauthorized access to partial data in a database that includes Power Wind e-commerce order records, although the vendor cannot yet confirm whether those specific order records were affected [1]. After learning of the matter on October 22, Power Wind received reports from online members that third parties had allegedly obtained data improperly and contacted consumers via email [1].
Power Wind says an outsourced Commerce Cloud database was accessed without authorization; whether its mall orders leaked is still unconfirmed
1 min read
- Disclosed
- Oct 27, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 10, 2026
- CVSS basis
- Our assessment
- Attack vector
- Third-party compromise
- Impact
- Data exfiltration
- Data type
- Contact infoTransactions / orders
- Actor type
- Unknown
- Motivation
- Unknown
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
After learning of the matter on October 22, Power Wind received reports from online members that third parties had allegedly obtained data improperly and contacted consumers via email [1]
Timeline
- Media reports on this cybersecurity incident[1]
Technical details
Source-Supported Details
Source excerpt: "Notably, just a month earlier Power Wind had issued a similar cybersecurity material announcement stating that an outsourced system vendor notified the company of an automated attack on its external service system in which hackers attempted paginated scraping of customer tables. Whether the two incidents are related or separate events awaits further clarification from Power Wind." [1].
References
Media1
- [1]
“值得留意的是，由於柏文在一個月前才發布類似的 資安重訊 ，系統委外廠商通知該公司的對外服務系統遭自動化攻擊，駭客試圖對客戶資料表進行分頁擷取。兩起事故是否有所關連，或為不同事件，有待柏文進一步說明。”
Expert help
Still not sure whether this affects you?
Tell us about your environment. We'll check it against this advisory, assess the risk, and give you concrete patch and monitoring steps.
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.