A CNA-carried material notice says the WooCommerce e-commerce database of Positive Energy Sports, a subsidiary of Positive Energy (5348), suffered unauthorized access and data extraction, with Nov 11 as the date of occurrence [1]. iThome reports the subsidiary isolated and contained the systems, patched vulnerabilities and reported to regulators, initially assessing no material operational impact [2]. Customers should watch for the company's email notices and anti-fraud reminders and be wary of contacts citing purchase details [1].
Positive Energy Sports e-commerce database breached and data taken; parent notifies regulator and customers
1 min read
- Disclosed
- Nov 11, 2026
- Published
- Nov 13, 2026
- Last updated
- Nov 13, 2026
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
- Watch for Positive Energy Sports' email notices and anti-fraud reminders and stay alert to scams [1].
Timeline
- Positive Energy files a material notice for its subsidiary[1]
Technical details
Remediation
Vendor guidance
- 1Beware of impersonation scams mitigate[1]
Watch for company email notices and be wary of contacts citing purchase details.
References
Media2
- [1]中央社(Yahoo股市轉載重大訊息)2026-11-11Accessed 2026-11-13Snapshot 2026-11-13 sha256 388be2f22cef
“發生緣由:WooCommerce 電商系統資料庫遭未經授權存取及資料擷取之資安事件。”
- [2]iThome
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.