55 results
Bank SinoPac experienced unauthorized customer account transfers on November 3 and held a press conference on November 4 confirming that external hackers had exploited a security configuration flaw in a new online banking transaction system provided by a third-party vendor .
According to iThome, on October 30, hygiene products manufacturer Kang Na Hsiung Enterprise (KNH, 9919) issued a material announcement on the Market Observation Post System (MOPS), stating that the database of 91APP, the outsourced vendor for its online service platform, suffered an automated attack resulting in unauthorized access to partial data, including order records from KNH's online store .
According to iThome, on October 29, Taiwan FamilyMart (5903) issued a material announcement on the Market Observation Post System (MOPS), stating that it was notified by its online platform outsourced vendor 91APP that an automated attack against 91APP's database resulted in the unauthorized scraping of partial member data from FamilyMart's 'FamiNow / Mobile Shopping' online platform .
Website performance monitoring firm DebugBear said an unauthorized third party gained access to its domain registrar account and replaced its monitoring script with malicious code for about two hours, in what it assesses was a targeted, financially motivated attack on one customer website .
According to BleepingComputer, Japan Airlines said Amadeus notified it on October 23 of unauthorized access to its Passenger Service System between August 10, 2023 and September 23, 2026, exposing booking codes, names and flight details of about 92,000 JAL customers, plus emails, phones and passport numbers for about 2,000; ANA, Asiana and Korean Air also confirmed impact .
According to iThome, on October 27, biotech company Tien Liang Biotech (4127) issued a material announcement on the Market Observation Post System (MOPS), stating that it recently received consumer reports of suspected personal data leakage and that an investigation revealed an automated attack on the database provided by its outsourced service platform vendor, in which partial information was unlawfully scraped .
Stockholm open-air museum Skansen said its ticketing provider Visit suffered a data breach that also affected several of Visit's other customers, and it was informed on October 27, 2026 .
According to iThome, on October 23, fitness service company Power Wind Health Industry (8462) issued a material announcement on the Market Observation Post System (MOPS), stating that the outsourced vendor for its e-commerce platform experienced a cybersecurity incident and that members reported suspected leakage of e-commerce order data .
Korean enterprise software vendor Douzone Bizon said on October 23, 2026 that attackers used a flaw in the backup solution behind its APO backup service to exfiltrate some encrypted data from backup servers, adding that it has found no sign the encryption keys leaked and has not yet identified affected customers or individuals .
According to iThome, on October 22, emerging stock outdoor apparel and mountaineering gear company Atunas (2940) issued a cybersecurity material announcement on the Market Observation Post System (MOPS), stating that the database of its outsourced service platform vendor suffered an automated attack in which partial information was unlawfully scraped, and that consumers reported suspected personal data leakage the same day .
According to iThome, emerging stock eco-friendly detergent maker Sea Mild Biotech (7516) issued a cybersecurity material announcement explaining that it received consumer reports of suspected personal data leakage, where third parties allegedly obtained data improperly from a platform managed by an outsourced vendor and contacted consumers via email .
According to an iThome report on October 22, 2026, Kemao Biotechnology (科懋生技) stated that an external-facing system operated by its outsourced e-commerce platform vendor suffered an automated attack in which the order database was scraped .
According to iThome, at 9:00 a.
According to iThome, on October 19, apparel company Munsin Enterprise (2916) issued a material announcement on the Market Observation Post System (MOPS), stating that it recently received consumer reports of suspected personal data leakage resulting from an automated attack on a database provided by its outsourced service platform vendor, in which partial information was unlawfully scraped .
Fireworks AI updated its October security incident bulletin on November 9, saying that beyond previously known stored secrets it found impact to account and billing information, plus secrets, datasets and incomplete models for a limited set of accounts, with evidence pointing to a financially motivated cybercriminal group engaged in LLMJacking .
Switzerland's FDPIC said PK Softech AG reported a cyberattack on its IT infrastructure on October 8, with data extracted from several pension funds including the federal pension fund Publica, and it opened a formal investigation on October 22 .
According to INTERNET Watch, Japan's Daiichi Kosho announced on October 8 that a PC of an employee at Nippon Columbia Group, which handles personal data on its behalf, was infected with malware on October 1-2, putting names, gender, birth dates, emails and phones of about 8,724,000 Big Echo and other store members and staff at risk, without passwords .
According to The Record, the Danish government said on October 5 that someone exploited an unnamed Danish company's legitimate access to the Central Person Register (CPR) to obtain the names, addresses and CPR numbers of about 8.
According to fuitededonnées.
Crypto exchange Bitget confirmed that, based on the latest on-chain tracing, about $387.