Prosecutors have expanded an investigation into an alleged data breach at the National Institute of Cyber Security, accusing a senior research official of orchestrating an alleged mass collection and sharing of confidential internal documents containing national security-related information.
The institute, which is overseen by the Ministry of Digital Affairs, operates as an independent administrative body tasked with advancing the nation’s cybersecurity capabilities, and helping government agencies respond to major cyberthreats.
The breach was discovered when the institute’s main frame malfunctioned earlier this year.
Photo copied by Liu Yung-yun, Taipei Times
It was later determined that it was invaded by a Web crawler program systematically harvesting restricted internal documents through exploited system vulnerabilities.
The Taipei District Prosecutors’ Office in March questioned three people at the institute who were allegedly involved in the breach, including former advanced research and development section chief Peng Min-chun (彭敏君), and researchers Ting Po-feng (丁柏楓) and Lee Yu-hsun (李昱勳).
Investigators also confiscated their mobile phones and computers as evidence.
Peng, Ting and Lee, who could face charges of contravening Criminal Code provisions on interference with computer use and the Personal Data Protection Act (個人資料保護法), were released on bail of NT$500,000, NT$200,000 and NT$100,000 respectively.
Prosecutors launched a second wave of investigations on Tuesday, questioning the three suspects again along with Peng’s former supervisor, Hsu Shih-chang (許世璋), and several other researchers accused of accessing sensitive internal documents without authorization.
Hsu was later released on bail of NT$200,000.
A source familiar with the investigation said that Peng’s team was ordered last year to develop administrative software capable of consolidating human resources documents and reimbursement records.
As the team required access to relevant data to develop the software, Peng allegedly instructed Ting and another researcher to develop a Web crawler program that exploited internal system vulnerabilities, the source said, adding that they used Lee’s computer to gain unauthorized access to other departments’ internal data.
They allegedly uploaded the sensitive documents to a cloud platform and named the project “XMAS,” allowing researchers within the team to freely access the files, the source said.
The institute’s internal inspection found that the login IP address appeared to originate from a computer used by Lee, while the account used to log in belonged to Ting, they said.
Prosecutors initially identified Peng as the key figure in the breach, but they later discovered from the collected evidence that Hsu might be the decisionmaker of the operation, they added.
UPGRADE: The Kang Ding-class frigate is replacing its Chaparall missiles with Tien Chien II and Hua Yang VLS, which would provide it with long-range, 360° air defense Taiwan plans to produce 1,200 to 1,376 Hai Chien II missiles (海劍二, Sea Sword II) — also known as TC-2N — to serve as the standard air defense system of the navy’s surface combatant fleet, a source said yesterday. Last week, the Hai Chien II, the naval version of the Tien Kung II missile (天劍二, Sky Sword II), completed a live-fire test in waters off the National Chungshan Institute of Science and Technology’s Jiupeng facility (九鵬) in Pingtung County’s Manjhou Township (滿州). The MIM72 Chaparral and other dated air defense missiles that currently arm Taiwanese ships have inadequate range to combat Chinese
REASONS FOR TRAVEL: An assistant professor said that proposed amendments to penalize drivers if they used drugs overseas would not deter people from traveling People who operate a motor vehicle under the influence of marijuana would have their driver’s license revoked, even if they used the substance while overseas, the Ministry of Transportation and Communications said yesterday, citing proposed amendments to the Road Traffic Management and Penalty Act (道路交通管理處罰條例). The amendments would also authorize the government to revoke the licenses of people determined to have used Category 1 or Category 2 narcotics, even if they were not operating a vehicle while under the influence of drugs, as well as ban them from taking the license test for three years, the ministry said. People aged 18 or
HEAVY WEATHER: Typhoon Jangmi is due to crash straight into the Ryukyus as airlines look to shift flights to larger aircraft or cancel flights to Okinawa entirely Taiwan’s international air carriers announced flight adjustments over the weekend as Typhoon Jangmi is forecast to hit the Ryukyu Islands today and tomorrow. The Central Weather Administration (CWA) upgraded Jangmi from a tropical storm to a typhoon at 8am yesterday, with the eye located 580km south of Naha city. It was moving north at 19kph. Today, China Airlines’ CI-120, CI-121, CI-122 and CI-123 flights between Taoyuan and Naha, Okinawa, have been canceled as well as CI-132 and CI-133 between Kaohsiung and Naha. EVA Air’s BR-112, BR-113, BR-186 and BR-185 flights between Taoyuan and Naha are also canceled. Low-cost carrier Tigerair Taiwan canceled IT-230,
Johanne Liou (劉喬安), a Taiwanese woman who shot to unwanted fame during the Sunflower movement protests in 2014, returned to Taiwan last night after being deported from the US. She is to stand trial in Taiwan for charges involving embezzlement, fraud and drug crimes. The Criminal Investigation Bureau (CIB) said it took her into custody at Taiwan Taoyuan International Airport and would first question her before transferring her to the New Taipei District Prosecutors’ Office. She was arrested upon disembarking a flight from San Francisco that landed shortly before 7pm. Liou absconded to the US in 2019 after jumping bail