MediumData breachActive
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
11 results
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
CNA reports that Taiwanese online travel agency ezTravel detected an external attack on its member center on Nov 7, and some historical order contact data was improperly obtained, affecting more than 690,000 people .
Japan's Doutor Coffee said on November 6 that its payment processor reported suspicious activity on its official online shop on October 28, and an investigation by its outsourced developer found a third party had accessed the site's admin panel on October 24-25 and exported and viewed member data .
US fashion e-retailer Revolve said in an SEC 8-K filed Oct 29 that an unauthorized actor accessed its systems and may have obtained, through automated means, names, contact details, payment card numbers and expiration dates of customers who saved payment information in their accounts .
According to iThome, e-commerce cloud ERP provider Mallbic stated that routine daily security checks on October 31 uncovered host anomalies and confirmed that unauthorized malicious commands had been executed on certain hosts; attackers entered through a brand website service portal, potentially affecting consumer and transaction data imported by merchants from other e-commerce platforms .
According to ITmedia, Iris Plaza announced on November 5 that following unauthorized access to an external cloud service used by the company, personal data of approximately 7.
Japanese flower-delivery operator Hana Cupid (花キューピット) said on October 28 that a third party gained unauthorized access to its management system on October 14-15, and that it confirmed during its investigation on October 19 that member data had leaked .
Japan's H2O Retailing and its subsidiary Hankyu Hanshin Department Stores said on October 19 that a third party gained unauthorized access to the customer management system via the department stores' booking site on October 16, and that unauthorized access was also found the next day on the official shopping site HANKYU HANSHIN E-STORES and on Remo Order, after which the company shut the sites down .
FANCL and its subsidiary Attenir announced on October 16 that an internal investigation on the 15th found their e-commerce sites were accessed without authorization between October 3 and 10, and they identified and disabled the abused function .
Dutch retail group Ahold Delhaize announced on October 12, 2026, that it had detected a security issue within its network and taken precautionary measures, including taking certain systems offline to protect its infrastructure, while noting that physical stores remained open .
A Nancy metropolitan museum said its online ticketing provider Vivaticket was hit by ransomware on March 2, 2026, encrypting hosted data and disabling online sales; if data was exfiltrated it would cover ticket-account names, contact details and purchase history, not bank data .