Answer Brief
The company says it has not been notified of similar access and is still assessing its exposure.
Signal Timeline
A quick visual path for analysts before reading the full brief.
- 1
The listed company published a material-information disclosure on the security event and the online store pause.
- 2
iThome reported on the disclosure.
Executive Summary: The company says it has not been notified of similar access and is still assessing its exposure.
Why It Matters
The source names it as a company listed under ticker 6776, a unit of the Acer group, and it says its subsidiary Haoyang Life uses Cyberbiz as an outsourced online store service provider. Cyberbiz reportedly had other customers affected by an event in which part of a database was accessed without authorization.
The operational decision is the notable part. The company paused the subsidiary's online store as a precaution while it works out whether it is affected. The source states that, as of the announcement, the company had not received notice from Cyberbiz of a similar situation. That boundary matters: the pause reflects uncertainty about exposure, not a confirmed compromise of the subsidiary's own data.
Technical Signal
The company also told members and consumers, through its website or online store, to stay alert for fraud and financial loss. The source does not say what data, if any, was involved, so readers should not assume any specific data categories. The fraud warning is best read as a precautionary customer-communication step, with no stated link to observed scam activity.
On impact, the company states that the event currently has no material effect on its finances or business. That is the company's own statement, made in a material-information disclosure, and it should be attributed that way. The source does not describe the length of the pause or give a restart date.
Operational Impact
The company says it is working with Cyberbiz to clarify whether the database was accessed without authorization. It has asked the vendor to carry out a security review and take necessary strengthening measures. It also says it will tighten security oversight of outsourced service providers. These are stated commitments, and the source gives no detail on how the oversight will work.
The affected teams are fairly clear from the text. Security and vendor-risk teams at merchants that rely on managed e-commerce platforms need to know which outsourced providers hold customer or order data. Incident response and legal or disclosure teams need a path for handling a vendor event that has not yet been confirmed to touch their own tenant. Customer service and fraud teams need to prepare for questions from members and consumers.
What To Watch
The source also points to a wider pattern in Taiwan reporting. It links a related iThome article saying that, after 91APP was reportedly hacked, security warnings emerged one after another at e-commerce technology service providers, including 1shop, Cyberbiz and meepShop. A listed headline also refers to e-commerce service supply-chain security incidents burning in several places at once. Those items are only headlines or a link here, so this brief does not describe their scope or cause. They suggest that readers should follow the related coverage for detail.
For global readers, the useful lesson is about shared platform dependency. When a managed platform serves many merchants, one provider event can force each customer to decide independently whether to suspend services, notify users, and demand answers from the vendor. This source shows one merchant choosing to pause first and investigate second. Whether that is proportionate depends on facts the source does not give, such as the nature of the access and the tenant separation at the provider.
As a monitoring implication, teams could keep an inventory of outsourced storefront, payment and customer-data providers, and decide in advance who can authorize a precautionary suspension. They might also watch for follow-up disclosures from Cyberbiz, the listed company and other merchants, and for any confirmation of what was accessed. Until such updates appear, the scope, cause, timing and data involved remain unknown.
Event Type: security
Importance: medium
Affected Companies
- Cyberbiz
- Haoyang Life
- Acer Group
- 91APP
- 1shop
- meepShop
Affected Sectors
- E-commerce
- Retail technology
- Third-party services
- Electronics distribution
Key Numbers
- Listed company ticker: 6776
Timeline
- The listed company published a material-information disclosure on the security event and the online store pause.
- iThome reported on the disclosure.
Frequently Asked Questions
Why did Haoyang Life pause its online store?
It learned that other customers of the outsourced provider Cyberbiz had a database accessed without authorization, and it is still working out whether it is affected.
Has Haoyang Life confirmed its own data was accessed?
No. The source says the company had not received notice from Cyberbiz of a similar situation as of the announcement. It is working with the vendor to clarify whether its own database was accessed without authorization, so exposure remains unconfirmed in the source.
What happened at Cyberbiz according to the report?
The source says unauthorized access to part of a database affected some Cyberbiz customers. It does not describe the cause, the data involved, the number of customers or the timing, so those details remain unknown from this report.
What did the company tell customers?
The company said members and consumers should stay alert for fraud and financial loss, with the notice placed on its website or online store. The source does not say what data may be involved or whether scam activity has been observed.
What follow-up actions does the company say it is taking?
The company says it asked Cyberbiz to run a security review and take necessary strengthening measures. It also plans to strengthen security oversight of outsourced service providers. The source gives no detail on the methods or schedule for either step.