Donation platform netiCRM vendor hacked; 20+ Taiwanese nonprofits warn donors of scams

According to iThome, servers of NETivism, the vendor behind netiCRM, a donation management system used by Taiwanese nonprofits, were breached by an external attacker, and more than 20 organizations including the Awakening Foundation, Citizen Congress Watch, the Judicial Reform Foundation and Taiwan Tongzhi Hotline have issued notices ^[1]. The vendor says the attacker obtained an account for its internal code management system and exploited a system flaw to gain admin rights on one server; customer site back-office accounts and outgoing mail account settings are treated as possibly exposed, while whether donor personal data was stolen is still under investigation ^[1][2]. Organizations using netiCRM should change all admin passwords promptly, and donors should beware of calls or messages impersonating the organization, netiCRM or bank support asking them to use ATMs or online banking ^[1][2].

Industries mainly affected: Technology

Organizations using netiCRM should change all admin passwords promptly, and donors should beware of calls or messages impersonating the organization, netiCRM or bank support asking them to use ATMs or online banking