81 results
Japan's Cyber Security Cloud says a tip from an external organization revealed that one employee's work GitHub credential had leaked, and on Nov 5 access logs showed suspicious past access apparently by a third party using it .
A CNA-carried material notice says WPG Holdings (3702) detected abnormal access to internal systems and confirmed that some employees' names and work email addresses were accessed without authorization .
A MoneyDJ-carried material notice says Hotai Motor (2207) subsidiary Hotai Service Marketing was notified by Cyberbiz, the vendor of its Daikin air-conditioner parts online store, of unauthorized access to part of its database .
Someone on the DarkForums and BreachForums underground forums claims to hold 46,000 TSMC employee records totalling 6.
heise online, citing Der Spiegel, reports that emergency alerts sent to the mobile pagers of fire, ambulance and civil-protection services in Saxony, Germany, have apparently been intercepted and posted on a social network for years, with hundreds arriving daily, mainly affecting the Leipzig area and the Zwickau, Vogtland and Erzgebirge districts .
Apify says on its status page that on Nov 9-10 an unauthorized third party used a compromised credential to obtain account credentials and access related Apify accounts; it detected the activity on Nov 11 at 12:13 UTC, cut off access and has notified customers whose personal information or stored data was accessed .
Wellead Biotech (7713) said in a Nov 11 MOPS material notice that its online-store vendor Cyberbiz reported unauthorized access to part of its database, involving some customers' order data from Wellead's store .
Telecom security firm Enea disclosed on November 11 a new state-level actor it calls SilentAir, tracked since early 2025, which launches signalling attacks from compromised SS7/Diameter network elements in operators in at least six Asian countries, primarily targeting Taiwanese mobile subscribers and also hitting a dozen more countries and territories .
Dentsu Digital announced on Nov 11 that an admin account used in the infrastructure of its TONARIWA marketing platform was accessed by a third party after its credentials leaked, with privileges escalated, and the service was suspended .
Security firm Claroc says it tried 43,551 Grok app addresses; 37,571 were online and 35,578 (94.
Japanese car-care products maker Soft99 announced on Nov 10 that its official online shop was accessed by an outside third party, and personal data of up to 136,968 members and shoppers may have leaked .
The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
OTC-listed Hi-Lai Foods (1268) said in a November 10 material announcement that it was notified that day by its outsourced shopping mall vendor Cyberbiz of a security incident in which part of the vendor database was accessed without authorization, involving order data of some customers of its online mall .
Listed company HeySong (1234) said in a November 10 material announcement that its outsourced online store vendor Cyberbiz notified it of unauthorized anomalous access to part of the vendor database, which includes HeySong online store order data .
According to The Philippine Star, the Philippine Securities and Exchange Commission (SEC) has confirmed a data breach affecting users of its digital platforms, with potentially exposed data limited to individual accounts' full name, username, email, mobile number, date of birth, gender, address and TIN; the SEC says no passwords or company records were affected and it notified the National Privacy Commission .
Japanese online printing service Raksul said on November 9, 2026 that unauthorized third-party access to its print data upload processing system was found around 0:20 on November 8, that system credentials had been improperly obtained, and that some stored data was accessible from outside .
iThome reports that Maywufa (1731) filed a material disclosure on November 9 saying that on November 6 online store members reported a suspected personal data leak, which initial findings link to its outsourced e-commerce platform provider’s system, with the exact cause and scope still under investigation .
According to iThome, servers of NETivism, the vendor behind netiCRM, a donation management system used by Taiwanese nonprofits, were breached by an external attacker, and more than 20 organizations including the Awakening Foundation, Citizen Congress Watch, the Judicial Reform Foundation and Taiwan Tongzhi Hotline have issued notices .
A material notice republished by MoneyDJ says Taiwan Sakura (9911) was notified on Nov 9 by its e-commerce vendor Cyberbiz that some data in Cyberbiz's database, which holds orders and personal data from the SAKURA official online store, was accessed without authorization .