According to iThome, on November 4, listed biotech company Grape King Bio (1707) issued a material announcement on the Market Observation Post System (MOPS), stating that the outsourced service vendor for its online store experienced a cybersecurity incident [1]. Grape King Bio noted that portions of the database of its e-commerce platform vendor Cyberbiz (Shunli Intelligence) suffered unauthorized abnormal access, including order and personal data from Grape King Bio's online store, though it cannot yet confirm whether the relevant data was affected or the actual scope of impact [1]. Grape King Bio established an emergency response team in accordance with internal personal data protection regulations, convened response meetings, and implemented necessary protective measures, with preliminary assessments indicating no material impact on company finances or business operations [1].
Cyberbiz Suffers Unauthorized Access; Scope of Impact on Grape King Bio's E-Commerce Data Remains Unclear
1 min read
- Disclosed
- Nov 5, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 8, 2026
- CVSS basis
- Our assessment
- Attack vector
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
Grape King Bio established an emergency response team in accordance with internal personal data protection regulations, convened response meetings, and implemented necessary protective measures, with preliminary assessments indicating no material impact on company finances or business operations
Timeline
- Media reports on this cybersecurity incident[1]
Technical details
Source-Supported Details
Source excerpt: "Regarding follow-up actions, Grape King Bio has posted an announcement on its e-commerce website and sent SMS notifications advising customers to remain vigilant against potential follow-on fraud attacks stemming from unauthorized personal data access; the company has also demanded that Cyberbiz promptly clarify the cause of the incident and confirm whether store orders and consumer personal data were accessed without authorization, as well as the potential scope of affected data." [1].
References
Media1
- [1]
“針對此事的後續處理,葡萄王已於電商網站發布公告,以及寄送簡訊通知,宣導客戶應提高警覺,避免因個人資料可能遭不當存取而受到後續詐騙攻擊;該公司亦要求順立儘速釐清事件原因、確認商城訂單及消費者個資是否遭未經授權存取,以及可能受到影響的資料範圍。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.