91APP database was hacked! Some data confirmed to have been captured, Ministry of Digital Development launches administrative inspection

The e-commerce technology services company 91APP was hacked a few days ago, and some data was confirmed to have been obtained without authorization. The Department of Digital Information has been involved in the investigation. As for the actual personal data involved and the number of people affected, it still needs to be further clarified.

E-commerce technology services company 91APP recently announced that its Commerce Cloud business platform database suffered an automated attack and some information was retrieved without authorization. The Digital Industry Agency of the Ministry of Digital Development stated that it had received a notification of the personal data incident from the operator, and on October 19 invited the Information Security Institute and external information security and legal experts to conduct an administrative inspection at the operator's location to clarify the cause of the incident, the scope of the data affected, and the impact on people's rights.

The Department of Industry and Information Technology stated that based on the information currently available, it has been confirmed that some data have been collected without authorization, but the actual personal data involved, the number of people affected and the number of data pieces still need to be further investigated and confirmed. The Ministry of Industry and Information Technology has asked 91APP to take stock of the captured information as soon as possible, as well as the brands and consumers involved, and notify the affected parties according to the investigation results.

The Department of Industry and Commerce pointed out that this administrative inspection mainly focuses on four major directions, including how hackers obtained data, whether the operator's database access permissions and security protection are appropriate, whether abnormal access is detected in real time, and whether other systems or data are affected.

The Ministry of Industry and Information Technology also requires 91APP to take necessary measures to reduce the risk of further access or use of data, and to continue to track the investigation and improve the situation. If any violation of the Personal Data Protection Act and other relevant regulations is found, it will be dealt with in accordance with the law.

The Department of Industry and Commerce reminds the public that if they receive a notification from a self-proclaimed shopping platform or merchant claiming that the order is abnormal and requires a refund, additional payment or account re-verification, they should first check through the official website or app they originally used. Do not click on unknown links directly, and do not provide passwords, SMS verification codes or other sensitive personal information. If you find suspected fraud, you can call the 165 anti-fraud consultation hotline for verification to reduce the risk of being deceived.

The Ministry of Industry and Information Technology emphasized that it will continue to supervise the implementation of personal data protection responsibilities by operators, and assist information service providers through industry coaching programs to strengthen access rights management, information security monitoring and personal data protection measures to reduce the risk of similar incidents happening again.