Citizen Congress Watch warns of possible donor data breach
SpilloverSpillover from the another organization incident · View original incident →An internal server at NetiCRM, the donation management provider for Taiwan's Citizen Congress Watch, was compromised, raising concerns that donors' personal information may have been leaked. The attacker exploited a vulnerability to gain administrator privileges and then attacked the organization's email, administrative accounts, and donation database. Citizen Congress Watch notified donors that names, phone numbers, donation records, and other information may have been leaked and activated protective measures.
Key facts
- Affected organization
- Citizen Congress Watch
- Original incident
- Taiwan netiCRM provider’s management server breached, client data stolen
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Possible exposure of donor names, phone numbers, donation records, and other information
- Cause / method
- Administrator privileges obtained by exploiting a vulnerability in donation management provider NetiCRM's server
- Location
- Taiwan
If your data was exposed
Exposed dataNamePhone numberUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- Citizen Congress Watch announced that an attack on its donation system may have exposed personal information and activated protective measures.
Original incident
This is spillover from the another organization incident.
Taiwan netiCRM provider’s management server breached, client data stolen
Impact: Theft of nonprofit clients’ contact details, contract and billing documents, and customer support records
An internal management server at Taiwan’s netiCRM provider was compromised, and nonprofit clients’ contact details, contract and billing documents, and customer support records were stolen. More than 30 nonprofit organizations warned donors about scams. The provider included servers belonging to around 500 clients in the scope of its inspections and rebuilding efforts, and as of November 12, no evidence of donor information theft had been found.
Related reports: 7 · last report →
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.