[CLSTR]
API
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 4 sources · 1 days · First seen · Last updated

91APP e-commerce data breach

Overview

Taiwanese e-commerce cloud service provider 91APP confirmed a data breach affecting approximately 4.8 million consumers across 1,329 brands. The incident occurred when hackers used an automated tool to exploit a vulnerability in an unpatched internal third-party tool, gaining unauthorized access to an order database.

Impacted brands include FamilyMart, MUJI, and Konny. The leaked information potentially includes names, phone numbers, delivery addresses, email addresses, and purchase histories, though 91APP stated that passwords and credit card information were not part of the affected database. 91APP Chairman Ho Ying-chi issued a public apology and announced a compensation scheme for affected consumers available until February 1, 2027. The company intends to implement zero-trust architecture and AI-driven anomaly detection to prevent future incidents.

Entities

Muji · Konny · Ho Ying-chi · 91APP · Ryohin Keikaku

Timeline

  1. [TECHNOLOGY] 2 sources
    MUJI App reports potential leak of 27 million user records

    MUJI parent company Ryohin Keikaku reports a potential data leak affecting 27.26 million current and former app members.

  2. [TECHNOLOGY] 2 sources
    91APP data breach affects nearly 4.8 million consumers

    A data breach at Taiwan's 91APP has potentially exposed the personal information of 4.8 million consumers across 1,329 brands, including FamilyMart and MUJI.

Sources

dtimes.jp · epochtimes.com · peoplenews.tw · unwire.pro