MediumData breachMonitoring
Japanese car-care products maker Soft99 announced on Nov 10 that its official online shop was accessed by an outside third party, and personal data of up to 136,968 members and shoppers may have leaked .
50 results
Japanese car-care products maker Soft99 announced on Nov 10 that its official online shop was accessed by an outside third party, and personal data of up to 136,968 members and shoppers may have leaked .
The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
OTC-listed Hi-Lai Foods (1268) said in a November 10 material announcement that it was notified that day by its outsourced shopping mall vendor Cyberbiz of a security incident in which part of the vendor database was accessed without authorization, involving order data of some customers of its online mall .
Listed company HeySong (1234) said in a November 10 material announcement that its outsourced online store vendor Cyberbiz notified it of unauthorized anomalous access to part of the vendor database, which includes HeySong online store order data .
iThome reports that Maywufa (1731) filed a material disclosure on November 9 saying that on November 6 online store members reported a suspected personal data leak, which initial findings link to its outsourced e-commerce platform provider’s system, with the exact cause and scope still under investigation .
According to iThome, servers of NETivism, the vendor behind netiCRM, a donation management system used by Taiwanese nonprofits, were breached by an external attacker, and more than 20 organizations including the Awakening Foundation, Citizen Congress Watch, the Judicial Reform Foundation and Taiwan Tongzhi Hotline have issued notices .
A material notice republished by MoneyDJ says Taiwan Sakura (9911) was notified on Nov 9 by its e-commerce vendor Cyberbiz that some data in Cyberbiz's database, which holds orders and personal data from the SAKURA official online store, was accessed without authorization .
iThome reports that 曜亞 (4138) filed a cybersecurity material disclosure on the evening of November 9 saying the DR CYJ online store of its subsidiary 曜胜生技 was affected by a security incident at e-commerce provider 順立智慧 (Cyberbiz), with order-related data accessed without authorization .
iThome reports that Topco (5434) filed a cybersecurity material disclosure on MOPS on November 9 saying the e-commerce outsourcing provider of its subsidiary 安永生活 (Anyong), 順立智慧, recently experienced abnormal data access .
Japanese furniture retailer Nitori Holdings said on November 9 that it confirmed unauthorized third-party access to a system it manages on November 6 and that up to 37.
On November 8, 2026, Taipei Exchange-listed Nobel Baby Co.
Emerging-market company Acer Medical (6857) said in a November 6 material announcement that other customers of Cyberbiz, the outsourced online store vendor of its subsidiary Acer Health, had suffered unauthorized database access, and that Acer Health suspended its online store as a precaution although it had not been notified of a similar issue .
Acer group firms 宏碁智新 (7794) and 倚天酷碁 (2432) said in Nov 6 filings that their e-commerce vendor Cyberbiz suffered unauthorized access to part of its database and provided the currently known affected data scope that day .
Weblink International (6776) said in a Nov 6 filing that some clients of Cyberbiz, the outsourced provider of its subsidiary Haoyang's online store, suffered unauthorized database access; it had not yet been notified but suspended the store as a precaution .
Taiyen (1737) said in a Nov 6 filing that its e-commerce vendor Cyberbiz reported unauthorized access to part of its database, which holds Taiyen online store order and personal data .
The Japan Network Security Association (JNSA) announced on November 6 that its "Information Security Comprehension Test Service" suffered unauthorized third-party access, potentially exposing personal data for up to approximately 15,128 users .
On November 4, 2026, TWCERT/CC disclosed three high-severity vulnerabilities in Abouttime Tech's Herowatch series, including an insecure direct object reference flaw in Herowatch Go Server (CVE-2026-121817), firmware signed with publicly known test keys in Herowatch Mini (CVE-2026-121818), and missing authentication in the Herowatch Mini ADB service (CVE-2026-121816) .
MS&AD group insurers Mitsui Sumitomo Insurance and Aioi Nissay Dowa said on Nov 6 that unauthorized access to their policyholder portal was detected on the night of Nov 2, related services were halted late on Nov 3, and the investigation confirmed a data leak .
Kyocera Communication Systems (KCCS) issued a second update on November 6 stating that a web server operated by its subsidiary MOTEX suffered unauthorized access, potentially exposing customer information including company names, personal names, email addresses, and phone numbers .