Search advisories

On October 30, Taiwan Broadband Communications (TBC) issued a material information filing on MOPS stating that IT systems of the company and its subsidiary were attacked by unknown external hackers, resulting in malicious encryption of files on certain servers and affecting some internal operational systems .

On October 28, Orange Electronic issued a material information filing on MOPS stating that some of its local area network storage devices had been hit by a ransomware attack, and its cybersecurity team immediately activated defense mechanisms and network isolation .

According to Media Innovation, The Japan Times and group company News2u Holdings disclosed unauthorized access to a group server on October 2 and said in a second report on the 16th that a ransomware attack was confirmed on September 18, hitting a file server used by administrative departments until August 2022 .

According to iThome, on the afternoon of September 14, electronics manufacturing services (EMS) and mechanical integration solutions provider Weibao Precision Technology (7744) issued a material announcement on the Market Observation Post System (MOPS), stating that its information systems were breached, resulting in data on certain systems being encrypted and locked; the company immediately activated its cybersecurity incident response mechanism, disconnected networks, isolated affected systems, convened an emergency response team led by the general manager, and engaged an external cybersecurity team to assist with investigation and recovery .

According to iThome, on the evening of September 1, emerging stock semiconductor IP company InPsytech (7898) issued a cybersecurity material announcement on the Market Observation Post System (MOPS), stating that its ERP system suffered a hacker encryption attack; after its information security unit detected anomalies in the ERP system and confirmed an encryption attack, it immediately launched comprehensive inspections, incident investigations, and protective operations, and is continuing to verify the scope of impact and conduct root cause analysis .

According to iThome, Soal Technology announced on July 20 that a network cybersecurity incident occurred, which was verified to be a ransomware file-encryption attack .

A Nancy metropolitan museum said its online ticketing provider Vivaticket was hit by ransomware on March 2, 2026, encrypting hosted data and disabling online sales; if data was exfiltrated it would cover ticket-account names, contact details and purchase history, not bank data .

According to BleepingComputer, South Korean education group Kyowon confirmed a ransomware attack in which data was exfiltrated and is investigating with authorities whether customer information was included .

Diamond Electric Holdings announced that its Thai subsidiary suffered unauthorized access on September 8, 2025, resulting in local servers and several personal computers being encrypted by ransomware .

According to Korea JoongAng Daily, South Korean media reported that online bookstore Yes24 suffered a ransomware attack .

According to Security NEXT, Ako City in Hyogo Prefecture was notified by its outsourced IT contractor on December 18, 2024, confirming that data on a Board of Education server had been encrypted by ransomware .

According to Security NEXT, furniture manufacturer and retailer WISE WISE discovered on November 18, 2024, that its business management system was inaccessible and confirmed two days later that it had been encrypted by ransomware .

According to China Daily Hong Kong, citing an investigation by the Office of the Privacy Commissioner for Personal Data (PCPD), the South China Athletic Association (SCAA) suffered a ransomware attack in March 2024 that affected the personal data of 72,315 members .

According to iThome (updated June 7 with Clevo's response), following the breach at Chicony Electronics (群光電子) a month earlier, veteran laptop manufacturer Clevo (藍天電腦) has also reportedly been targeted by a ransomware group .

MediSecure said in its official statement that on 13 April 2024 it found a database server had been encrypted by suspected ransomware, and that about 6.