According to iThome, on October 30, hygiene products manufacturer Kang Na Hsiung Enterprise (KNH, 9919) issued a material announcement on the Market Observation Post System (MOPS), stating that the database of 91APP, the outsourced vendor for its online service platform, suffered an automated attack resulting in unauthorized access to partial data, including order records from KNH's online store [1]. Upon receiving notification, KNH immediately activated its incident response mechanism in accordance with personal data incident reporting and handling procedures and notified relevant regulatory authorities as required by law [1]. Based on a preliminary assessment, KNH determined that the incident has no material impact on the group's operations [1].
91APP Hit by Automated Attack; Kang Na Hsiung Order Data Stored in Accessed Database
1 min read
- Disclosed
- Nov 2, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 8, 2026
- CVSS basis
- Our assessment
- Attack vector
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
Based on a preliminary assessment, KNH determined that the incident has no material impact on the group's operations [1]
Timeline
- Media reports on this cybersecurity incident[1]
Technical details
Source-Supported Details
Source excerpt: "The company noted that if consumers subsequently seek compensation due to personal data leakage, it will simultaneously pursue claims against 91APP." [1].
References
Media1
- [1]
“該公司提及,假若後續發生消費者因個資外流請求賠償的情形,他們將同步向91APP提出求償。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.