The personal data of some of the users of Chunghwa Post’s online shopping Web site have been leaked following a hack into the system on Wednesday last week, the company confirmed yesterday.
Spokeswoman Wang Shu-ming (王淑敏) said that the hacker broke into the dataset containing the orders that have been made by its Post Mall subscribers since October last year, adding that the orders contain the names of persons placing the orders, as well their telephone numbers, addresses, e-mails, and the items and quantities they purchased.
However, the data did not contain users’ bank account numbers, credit card numbers, personal ID numbers and birthdays, Wang said.
About 17,000 orders have been stolen, she said.
The hacker broke into the system at about 10pm on Wednesday when the site’s vendors were updating their product information, she said.
The company then received a telephone call on Thursday last week from a buyer who said that he was duped into paying more than NT$20,000 (US$611) for Yu He Pao lychees that he purchased from Post Mall, Wang said.
“The victim said that he only ordered one box and later received a telephone call from someone claiming to be a Post Mall administrator, who said the victim had ordered 12 boxes. The victim was told that he needed to change the quantity at the ATM and ended up paying NT$23,894 for the transaction,” Wang said, adding that a box of Yu He Pao lychees costs NT$495.
The hacker appeared to specifically target orders for Yu He Pao lychees because the fruit is in season, she said.
Apart from that victim, Wang said the company had received between 70 and 80 telephone calls from Post Mall subscribers reporting fraud.
She said that she had received a telephone call from the fraudster herself because she had purchased lychees from Post Mall.
The person who spoke to her on the telephone seemed to have a Chinese accent, she said, adding that the company’s technical specialists also identified the hacker’s IP address as being in China.
In addition to reporting the telephone scam to the police, Wang said the company has changed the settings of the network and enhanced its firewall to better protect the personal data of its subscribers.
The company will compensate the man who called on Thursday for his loss, she said.
The incident was the first time Post Mall’s data security was compromised. Established in October last year, Post Mall has 2,000 vendors and sells more than 26,000 items, with annual revenue exceeding NT$300 million.
Considering that most countries issue more than five denominations of banknotes, the central bank has decided to redesign all five denominations, the bank said as it prepares for the first major overhaul of the banknotes in more than 24 years. Central bank Governor Yang Chin-lung (楊金龍) is expected to report to the Legislative Yuan today on the bank’s operations and the redesign’s progress. The bank in a report sent to the legislature ahead of today’s meeting said it had commissioned a survey on the public’s preferences. Survey results showed that NT$100 and NT$1,000 banknotes are the most commonly used, while NT$200 and NT$2,000
The Centers for Disease Control (CDC) yesterday reported the first case of a new COVID-19 subvariant — BA.3.2 — in a 10-year-old Singaporean girl who had a fever upon arrival in Taiwan and tested positive for the disease. The girl left Taiwan on March 20 and the case did not have a direct impact on the local community, it said. The WHO added the BA.3.2 strain to its list of Variants Under Monitoring in December last year, but this was the first imported case of the COVID-19 variant in Taiwan, CDC Deputy Director-General Lin Ming-cheng (林明誠) said. The girl arrived in Taiwan on
South Korea is planning to revise its controversial electronic arrival card, a step Taiwanese officials said prompted them to hold off on planned retaliatory measures, a South Korean media report said yesterday. A Yonhap News Agency report said that the South Korean Ministry of Foreign Affairs is planning to remove the “previous departure place” and “next destination” fields from its e-arrival card system. The plan, reached after interagency consultations, is under review and aims to simplify entry procedures and align the electronic form with the paper version, a South Korean ministry official said. The fields — which appeared only on the electronic form
The Ministry of Foreign Affairs (MOFA) is suspending retaliation measures against South Korea that were set to take effect tomorrow, after Seoul said it is updating its e-arrival system, MOFA said today. The measures were to be a new round of retaliation after Taiwan on March 1 changed South Korea's designation on government-issued alien resident certificates held by South Korean nationals to "South Korea” from the "Republic of Korea," the country’s official name. The move came after months of protests to Seoul over its listing of Taiwan as "China (Taiwan)" in dropdown menus on its new online immigration entry system. MOFA last week