Taiwan netiCRM provider’s management server breached, client data stolen
An internal management server at Taiwan’s netiCRM provider was compromised, and nonprofit clients’ contact details, contract and billing documents, and customer support records were stolen. More than 30 nonprofit organizations warned donors about scams. The provider included servers belonging to around 500 clients in the scope of its inspections and rebuilding efforts, and as of November 12, no evidence of donor information theft had been found.
Key facts
- Affected organization
- Being confirmed
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Theft of nonprofit clients’ contact details, contract and billing documents, and customer support records
- Cause / method
- Compromise of an internal management server with administrative privileges over other servers
- Location
- Taiwan
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- More than 30 nonprofit organizations issued warnings following a server breach at the netiCRM provider.
- Nonprofit organizations warned donors about scams.
- The theft of client data from an internal management server was confirmed, and efforts to inspect and rebuild servers belonging to around 500 clients were initiated.
Also affected by this incident
Citizen Congress Watch warns of possible donor data breach
↳ Knock-on damage from another organization’s incident · View original incidentImpact: Possible exposure of donor names, phone numbers, donation records, and other information
An internal server at NetiCRM, the donation management provider for Taiwan's Citizen Congress Watch, was compromised, raising concerns that donors' personal information may have been leaked. The attacker exploited a vulnerability to gain administrator privileges and then attacked the organization's email, administrative accounts, and donation database. Citizen Congress Watch notified donors that names, phone numbers, donation records, and other information may have been leaked and activated protective measures.
Related reports: 2 →
7 related reports
- 捐款人個資恐外洩！netiCRM服務商遭駭，公督盟、司改會等超過30個非營利組織接連示警
- 捐款人個資恐外洩！netiCRM服務商遭駭，公督盟、司改會等超過20個非營利組織接連示警
- netiCRM服務商遭駭！逾30家台灣NGO示警防詐，捐款人個資是否外洩仍待查
- netiCRM服務商遭駭！逾30家台灣NGO示警防詐，捐款人個資是否外洩仍待查 | 數位時代
- 多家NGO使用捐款系統遭駭 單位發示警訊息留意詐騙
- netiCRM服務商最新調查指出是內部管理主機遭駭，暫未發現捐款人資料外洩，已將500家客戶主機納入檢查及重建範圍
- 【資安日報】11月12日，netiCRM服務商內部管理主機遭駭，暫未發現捐款人資料外洩，已將500多家客戶主機納入檢查及重建範圍
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.