Citizen Congress Watch warns of possible donor data breach
SpilloverSpillover from the another organisation incident · View original incident →An internal server at NetiCRM, the donation management provider for Taiwan's Citizen Congress Watch, was compromised, raising concerns that donors' personal information may have been leaked. The attacker exploited a vulnerability to gain administrator privileges and then attacked the organisation's email, administrative accounts and donation database. Citizen Congress Watch notified donors that names, phone numbers, donation records and other information may have been leaked and activated protective measures.
Key facts
- Affected organisation
- Citizen Congress Watch
- Original incident
- Taiwan netiCRM provider’s management server breached, client data stolen
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Possible exposure of donor names, phone numbers, donation records and other information
- Cause / method
- Administrator privileges obtained by exploiting a vulnerability in donation management provider NetiCRM's server
- Location
- Taiwan
If your data was exposed
Exposed dataNamePhone numberUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Citizen Congress Watch announced that an attack on its donation system may have exposed personal information and activated protective measures.
Original incident
This is spillover from the another organisation incident.
Taiwan netiCRM provider’s management server breached, client data stolen
Impact: Theft of non-profit clients’ contact details, contract and billing documents, and customer support records
An internal management server at Taiwan’s netiCRM provider was compromised, and non-profit clients’ contact details, contract and billing documents, and customer support records were stolen. More than 30 non-profit organisations warned donors about scams. The provider included servers belonging to around 500 clients in its inspection and rebuilding programme, and as of 12 November, no evidence of donor information theft had been found.
Related reports: 7 · last report →
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.