MediumData breachMonitoring
Japanese car-care products maker Soft99 announced on Nov 10 that its official online shop was accessed by an outside third party, and personal data of up to 136,968 members and shoppers may have leaked .
31 results
Japanese car-care products maker Soft99 announced on Nov 10 that its official online shop was accessed by an outside third party, and personal data of up to 136,968 members and shoppers may have leaked .
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
OTC-listed Hi-Lai Foods (1268) said in a November 10 material announcement that it was notified that day by its outsourced shopping mall vendor Cyberbiz of a security incident in which part of the vendor database was accessed without authorization, involving order data of some customers of its online mall .
Listed company HeySong (1234) said in a November 10 material announcement that its outsourced online store vendor Cyberbiz notified it of unauthorized anomalous access to part of the vendor database, which includes HeySong online store order data .
iThome reports that Maywufa (1731) filed a material disclosure on November 9 saying that on November 6 online store members reported a suspected personal data leak, which initial findings link to its outsourced e-commerce platform provider’s system, with the exact cause and scope still under investigation .
CNA reports that Taiwanese online travel agency ezTravel detected an external attack on its member center on Nov 7, and some historical order contact data was improperly obtained, affecting more than 690,000 people .
A material notice republished by MoneyDJ says Taiwan Sakura (9911) was notified on Nov 9 by its e-commerce vendor Cyberbiz that some data in Cyberbiz's database, which holds orders and personal data from the SAKURA official online store, was accessed without authorization .
iThome reports that 曜亞 (4138) filed a cybersecurity material disclosure on the evening of November 9 saying the DR CYJ online store of its subsidiary 曜胜生技 was affected by a security incident at e-commerce provider 順立智慧 (Cyberbiz), with order-related data accessed without authorization .
iThome reports that Topco (5434) filed a cybersecurity material disclosure on MOPS on November 9 saying the e-commerce outsourcing provider of its subsidiary 安永生活 (Anyong), 順立智慧, recently experienced abnormal data access .
Emerging-market company Acer Medical (6857) said in a November 6 material announcement that other customers of Cyberbiz, the outsourced online store vendor of its subsidiary Acer Health, had suffered unauthorized database access, and that Acer Health suspended its online store as a precaution although it had not been notified of a similar issue .
Acer group firms 宏碁智新 (7794) and 倚天酷碁 (2432) said in Nov 6 filings that their e-commerce vendor Cyberbiz suffered unauthorized access to part of its database and provided the currently known affected data scope that day .
Japan's Doutor Coffee said on November 6 that its payment processor reported suspicious activity on its official online shop on October 28, and an investigation by its outsourced developer found a third party had accessed the site's admin panel on October 24-25 and exported and viewed member data .
Weblink International (6776) said in a Nov 6 filing that some clients of Cyberbiz, the outsourced provider of its subsidiary Haoyang's online store, suffered unauthorized database access; it had not yet been notified but suspended the store as a precaution .
Taiyen (1737) said in a Nov 6 filing that its e-commerce vendor Cyberbiz reported unauthorized access to part of its database, which holds Taiyen online store order and personal data .
US fashion e-retailer Revolve said in an SEC 8-K filed Oct 29 that an unauthorized actor accessed its systems and may have obtained, through automated means, names, contact details, payment card numbers and expiration dates of customers who saved payment information in their accounts .
According to iThome, e-commerce cloud ERP provider Mallbic stated that routine daily security checks on October 31 uncovered host anomalies and confirmed that unauthorized malicious commands had been executed on certain hosts; attackers entered through a brand website service portal, potentially affecting consumer and transaction data imported by merchants from other e-commerce platforms .
According to ITmedia, Iris Plaza announced on November 5 that following unauthorized access to an external cloud service used by the company, personal data of approximately 7.
Japanese flower-delivery operator Hana Cupid (花キューピット) said on October 28 that a third party gained unauthorized access to its management system on October 14-15, and that it confirmed during its investigation on October 19 that member data had leaked .
According to an iThome report on October 22, 2026, Kemao Biotechnology (科懋生技) stated that an external-facing system operated by its outsourced e-commerce platform vendor suffered an automated attack in which the order database was scraped .
Japan's H2O Retailing and its subsidiary Hankyu Hanshin Department Stores said on October 19 that a third party gained unauthorized access to the customer management system via the department stores' booking site on October 16, and that unauthorized access was also found the next day on the official shopping site HANKYU HANSHIN E-STORES and on Remo Order, after which the company shut the sites down .