Public welfare organizations and charity groups are reported to have been hacked or scammed. Members and donors are warned not to be gullible and suffer harm.
Hackers and fraud groups have attacked many private public welfare organizations, sending phishing letters or text messages under false names to ask donors to reset their financial information. Boyfriend, Sunshine, Lixin, Zhishan, Apple Charity, Family Support and Caring for Life Association, etc. have all been affected and responded urgently.
Quick Look
- Recently, many public welfare and charity organizations in Taiwan have suffered from hacker attacks and impersonation fraud, including organizations such as Boyu, Sunshine, Lixin, Zhishan, Apple Charity, Family Support and Care for Life Association.
- They have reported that donors’ personal information has been stolen or phishing letters have been sent under false names.
- Each foundation has urgently adopted information security protection and reported the case to the police.
AI-generated summary
Why It Matters
Recently, many public welfare organizations and care associations have been attacked by malicious external parties, resulting in the leakage of donor information, and fraud groups further sending phishing letters under false names.
The Boyfriend Foundation posted an "Important Fraud Prevention and Response Announcement" on its official website on October 13, reminding the public not to click on unknown links or join non-official LINEs of the association.
Hackers and fraud groups are rampant. They not only attack the public sector, but also private charity organizations and charity groups. They send emails and text messages under false names, asking donors to reset the amount, provide financial information, etc., and there may even be an outflow of donors' personal information. A Taoyuan City citizen surnamed Wang reported to this newspaper that a foundation to which he has been donating for a long time published serious anti-fraud information on its official website at the beginning of the month. He further found out that in the past two months, foundations including Boyu, Lixin, Sunshine, Perfection, Apple Charity, Family Support, and the Life Care Association have all encountered similar situations. They have also made information security measures, such as blocking server vulnerabilities, rebuilding network management systems, and proactively reminding the public on the official website and in the community not to fall victim to the tricks of hackers and fraud groups.
It is understood that the Boyu Foundation confirmed on its official website last month that fraudulent letters were sent to donors by illegal individuals. Boyu received relevant inquiries and reports, and the investigation confirmed that the outsourced system was hacked, causing the donation data to be accessed and withdrawn. "System isolation and evidence preservation were completed immediately, and the online donation channel on the official website was suspended." It also called the police for investigation, added a firewall to strengthen information security, and proactively sent 80,000 warning text messages to donors.
The Sunshine Foundation issued an "Important Fraud Prevention Statement and Emergency Warning Notice" on November 3. Recently, many public welfare groups, including them, have suffered external malicious attacks, resulting in the illegal theft of some donors' information. The Sunshine Foundation was sent fraudulent phishing letters to donors under false names, and has reported the case to the police investigation unit and the "165" anti-fraud hotline.
A similar theme post on the official website of the Lixin Foundation on the 4th emphasized that Lixin will never ask the public for any reason to "operate ATMs or online banking to transfer funds or cancel payment settings; change regular fixed donation debit accounts, or provide credit card numbers, CVV security codes and SMS verification codes; click on unknown links and re-enter financial account or credit card information; join private LINE groups or unofficial social accounts to confirm donation information or perform financial operations."
The Zhishan Social Welfare Foundation announced on the 5th that it had received reports that a suspected fraud group was using the name of Zhishan, contacting the adopter and requesting to reset or operate the "regular fixed donation". The association called on everyone to be more vigilant and avoid being deceived; the Apple Foundation reminded the public on the 6th that if they receive For emails, e-mails, text messages, websites or social media messages that pretend to be in the name of the association, please dial "165" for verification; the Family Support Foundation urges donors to be vigilant and avoid being induced by scammers to provide financial personal information, click on unknown links or follow instructions.
In addition to organizations caring for and caring for people being hacked, even animal protection-focused societies were almost affected. The "Care for Life Association" announced on its official website on the 9th that the website's online donation system and membership system were provided by NetiCRM, and the company's internal management host was hacked. An initial investigation showed no sign that donor information had been stolen, but it still called on members to "beware of fake contacts."
The Lai Hsin Foundation released the "Donor Personal Data Security Incident Description and Fraud Prevention Reminder" on November 4. The Foundation proactively discovered that donors' personal information was suspected of being improperly accessed and has taken system security protection measures.
The Sunshine Foundation issued an "Important Fraud Prevention Statement and Emergency Warning Notice" on November 3, stating that many public welfare groups, including the association, have recently suffered external malicious attacks, resulting in the illegal theft of some donors' information.
The official website of the Apple Charitable Foundation announced on November 6 that it will "absolutely not" ask people to operate ATMs, online banking, change donation settings, cancel installment payments, or ask people to provide credit card security codes (CVV). Please avoid clicking on links from unknown sources.
On November 6, the official website of the Family Support Foundation issued a "Beware of Public Welfare Frauds", stating that the association has recently been fraudulently used by unscrupulous people to commit fraud on the grounds of "abnormal regular fixed-amount donations", "change of deduction methods", "cancellation of repeated deductions" and other reasons.
The Caring for Life Association issued an "Emergency Reminder" on its official website on November 9, calling on members and donors to pay attention to fake contacts and avoid being scammed.
The Perfection Foundation issued a "Fraud Prevention Alert" on November 5, explaining that a fraud group contacted donors under false names and asked to reset regular fixed donations. The association urged everyone to identify the official LINE account to avoid being deceived.
What to Watch
AI outlook — possibilities, not facts
The police and police investigation units will launch an investigation into the hacking incident of public welfare groups
Very likely · Within weeks
Open Questions
- What is the source behind the hacker organization?
- What is the exact total number of outflows of donors?






