Healthcare

Nobel Baby: Outsourced Online Store Vendor Cyberbiz Suffers Unauthorized Database Access Involving Order-Related Data

On November 8, 2026, Taipei Exchange-listed Nobel Baby Co.

Amplifon Americas said an unauthorized third party obtained files from certain systems between Jan 18 and Feb 8, 2026; it detected suspicious activity on Feb 11 and determined on Oct 6 that personal information may have been affected .

According to iThome, on November 5, Emerging Stock Market company Far East Bio-Tec Co.

Acronis TRU disclosed on Nov 4 an attack framework called BOSSAI that combined 12 AI agents, targeted organizations in 11 countries over 12 observed days, and was assessed to be run by an individual in Hualien City, Taiwan .

According to iThome, emerging stock eco-friendly detergent maker Sea Mild Biotech (7516) issued a cybersecurity material announcement explaining that it received consumer reports of suspected personal data leakage, where third parties allegedly obtained data improperly from a platform managed by an outsourced vendor and contacted consumers via email .

According to an iThome report on October 22, 2026, Kemao Biotechnology (科懋生技) stated that an external-facing system operated by its outsourced e-commerce platform vendor suffered an automated attack in which the order database was scraped .

According to iThome, DR.

US drug distributor McKesson said in an SEC 8-K filing that it discovered a cybersecurity incident affecting its information systems on August 25 and that the investigation is in its early stages .

According to CNBC, US medical device maker Boston Scientific disclosed a cyberattack in an SEC filing on August 26 that disrupted access to company information systems and applications, including shipment services .

According to National Business Daily, citing an announcement by WuXi AppTec, the DNA Encoded Library (DEL) platform under its biology business unit recently experienced a cybersecurity incident .

According to The Record, Polish authorities are investigating a cyberattack on healthcare software provider MyDr that may have exposed data of nearly 19 million people and more than 12,000 medical facilities .

US genetic testing lab Baylor Genetics said an unauthorized third party accessed parts of its network and data between June 11 and 17, 2026, potentially involving patients' birth dates, medical testing information, lab results and health insurance details, Social Security numbers for a very limited subset, and for some employees government ID numbers and financial account information .

According to iThome, on the evening of August 10, pharmaceutical distribution and medical logistics provider Chiu Yu (4173) issued a cybersecurity material announcement on the Market Observation Post System (MOPS), followed by reports of a second attack a day later .

According to iThome, CHBiotech announced on August 11 that some of its information systems suffered a cyberattack .

According to iThome, Jewel Enterprises announced on August 10 that some of its information systems suffered a cyberattack .

According to iThome, Foresee Pharmaceuticals announced on August 7 that its information systems suffered a hacker attack on August 4 .

According to iThome, biotech company PharmaEssentia (6446) issued a material information announcement on the Market Observation Post System (MOPS) on the evening of August 3, stating that certain information systems of the company and its subsidiary Pan-Thai Medical suffered a cyberattack; the company has activated its information security defense mechanisms, engaged external cybersecurity firms and experts for assistance, and notified regulatory authorities in accordance with regulations .

According to The HIPAA Journal, South Carolina nonprofit health system AnMed confirmed on July 26, 2026 a cybersecurity disruption involving malware that took down computers, phones and internet and forced 83 of its 106 facilities to close temporarily .

According to DSIH, Pulsy, the Grand Est regional e-health operator, was attacked on June 18, 2026, leading to exfiltration of about 5 million rows of patient administrative data including names, sex, birth dates and the national health identifier INS .

Novo Nordisk said it identified unauthorized access to a limited number of internal IT systems and found certain non-public data, including personal data, was copied externally; some systems were taken offline while core operations continued .