Collins Co. says the 91APP-run order system for its shop was automatically attacked, and some member order data may have been taken

According to iThome, apparel and textile distributor Collins Co. (2906) published a cybersecurity material announcement on the Market Observation Post System on October 27 stating that its shopping website order system, provided by e-commerce technology vendor 91APP, suffered an automated database attack in which partial information was unlawfully scraped ^[1]. Collins recently received reports from members who received fraudulent emails impersonating the company, and confirmed that order-related data of some members may have been affected, while continuing to verify the actual scope of impacted data ^[1]. The incident involves the outsourced order system for Collins' shopping website, and Collins and the service provider are still clarifying the contents and scope of the extracted data ^[1].

Industries mainly affected: Retail

The incident involves the outsourced order system for Collins' shopping website, and Collins and the service provider are still clarifying the contents and scope of the extracted data ^[1].