Domain
iThome reports that Maywufa (1731) filed a material disclosure on November 9 saying that on November 6 online store members reported a suspected personal data leak, which initial findings link to its outsourced e-commerce platform provider’s system, with the exact cause and scope still under investigation .
According to iThome, servers of NETivism, the vendor behind netiCRM, a donation management system used by Taiwanese nonprofits, were breached by an external attacker, and more than 20 organizations including the Awakening Foundation, Citizen Congress Watch, the Judicial Reform Foundation and Taiwan Tongzhi Hotline have issued notices .
A material notice republished by MoneyDJ says Taiwan Sakura (9911) was notified on Nov 9 by its e-commerce vendor Cyberbiz that some data in Cyberbiz's database, which holds orders and personal data from the SAKURA official online store, was accessed without authorization .
iThome reports that 曜亞 (4138) filed a cybersecurity material disclosure on the evening of November 9 saying the DR CYJ online store of its subsidiary 曜胜生技 was affected by a security incident at e-commerce provider 順立智慧 (Cyberbiz), with order-related data accessed without authorization .
iThome reports that Topco (5434) filed a cybersecurity material disclosure on MOPS on November 9 saying the e-commerce outsourcing provider of its subsidiary 安永生活 (Anyong), 順立智慧, recently experienced abnormal data access .
NTT Data announced on Nov 9 that the sign-up service for Sumitomo Life's standalone Vitality programs, which it builds and operates under contract, was accessed by a third party and personal data of about 80,000 users leaked .
Ethersphere maintainers said on GitHub that Swarm Desktop 0.
Wiz says an attacker used IAM credentials from an AWS account associated with Qubole between Oct 14 and 26, 2026 to assume IAM roles that multiple customers had created to trust Qubole and enter their AWS environments .
The Hacker News reports that some Keplr crypto wallets set up with Google or Apple accounts had funds stolen by an attacker who used a security flaw at Web3Auth, the company running that sign-in .
Acer group firms 宏碁智新 (7794) and 倚天酷碁 (2432) said in Nov 6 filings that their e-commerce vendor Cyberbiz suffered unauthorized access to part of its database and provided the currently known affected data scope that day .
Weblink International (6776) said in a Nov 6 filing that some clients of Cyberbiz, the outsourced provider of its subsidiary Haoyang's online store, suffered unauthorized database access; it had not yet been notified but suspended the store as a precaution .
Taiyen (1737) said in a Nov 6 filing that its e-commerce vendor Cyberbiz reported unauthorized access to part of its database, which holds Taiyen online store order and personal data .
QiAnXin XLab says it captured a suspicious script, cwpsrv_update.
French cooperative banking group Crédit Mutuel Arkéa announced on November 4, 2026, that it had suffered a cyberattack enabling attackers to execute fraudulent transactions, prompting the bank to suspend certain operations to prevent further fraudulent fund movements .
According to Al Jazeera, an Egyptian digital advertising operator confirmed that one of its billboards was subjected to unauthorized control and immediately halted playback .
Bank SinoPac experienced unauthorized customer account transfers on November 3 and held a press conference on November 4 confirming that external hackers had exploited a security configuration flaw in a new online banking transaction system provided by a third-party vendor .
According to RTHK, Hong Kong's privacy commissioner received breach notifications from several airlines and electrical retailers and opened investigations, logging 51 complaints and 48 enquiries as of October 30 with losses from about HK$10,000 to over HK$1.
According to iThome, e-commerce cloud ERP provider Mallbic stated that routine daily security checks on October 31 uncovered host anomalies and confirmed that unauthorized malicious commands had been executed on certain hosts; attackers entered through a brand website service portal, potentially affecting consumer and transaction data imported by merchants from other e-commerce platforms .
Website performance monitoring firm DebugBear said an unauthorized third party gained access to its domain registrar account and replaced its monitoring script with malicious code for about two hours, in what it assesses was a targeted, financially motivated attack on one customer website .
According to BleepingComputer, Japan Airlines said Amadeus notified it on October 23 of unauthorized access to its Passenger Service System between August 10, 2023 and September 23, 2026, exposing booking codes, names and flight details of about 92,000 JAL customers, plus emails, phones and passport numbers for about 2,000; ANA, Asiana and Korean Air also confirmed impact .