Follow us on Google News
Taiwan has reported a series of cyberattacks targeting more than 10 businesses and online platforms, affecting over one million personal records. Government officials said nearly half the attacks involved artificial intelligence, while some malicious traffic appeared to originate from Hong Kong.
How Serious Were the Attacks?
Taiwan’s Ministry of Digital Affairs confirmed that the incidents affected businesses operating digital platforms and handling customer information.
The compromised records included names, telephone numbers, email addresses and order details. Officials said preliminary investigations indicated that artificial intelligence was involved in nearly half the attacks.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
However, investigators have not confirmed any breaches involving credit card details or other payment information in the cases reviewed.
How Was AI Used?
According to cybersecurity officials, attackers used AI-powered tools to identify weaknesses in websites and digital infrastructure. Some incidents involved ARTeX, a Chinese-developed tool designed to test security vulnerabilities in computer systems and websites. The technology reportedly helped attackers identify weak passwords, outdated software and other security gaps.
Officials explained that AI could automate vulnerability discovery, allowing criminals to conduct attacks more quickly and at lower costs. This capability has raised concerns about increasingly automated cybercrime operations targeting businesses.
Where Did the Attacks Originate?
Investigators traced the latest wave of attacks to around mid-September, with the first incidents reported in South Korea. Several attacks had been identified in Taiwan by October 20, and the activity was continuing when officials discussed their findings.
Some malicious traffic appeared to originate from Hong Kong, while other connections passed through servers in different countries. Digital Affairs Minister Lin Yi-jing cautioned that internet addresses associated with Hong Kong did not necessarily establish the attackers’ actual locations.
Which Companies Were Affected?
Authorities declined to identify the businesses included in their investigation, citing potential financial and reputational consequences.
Separately, e-commerce service provider 91APP disclosed a breach potentially affecting up to 4.8 million consumers. Online travel agency ezTravel also reported that information belonging to more than 690,000 members had been affected.
The ministry did not confirm whether either company was included in the cases under investigation.
What Action Must Companies Take?
Taiwan requires digital economy businesses to report personal data breaches to the Ministry of Digital Affairs within 72 hours of becoming aware of an incident. Authorities have also urged companies to notify affected customers and contain security breaches within the same period.
Businesses must submit improvement plans within one month. Officials warned that organisations could face legal liability if compromised information resulted in fraud-related financial losses.
How Could Stolen Data Be Misused?
Cybersecurity officials warned that stolen customer details could support subsequent impersonation and financial fraud.
Criminals could pose as legitimate retailers and contact customers through fraudulent support accounts on the Line messaging application. Victims might then be persuaded to follow instructions supposedly intended to cancel recurring payments.
The incidents highlight how breaches involving ordinary customer information can create further opportunities for fraud, even when banking credentials or payment card information have not been confirmed stolen.
