《TAIPEI TIMES》ezTravel reports data breach affecting over 690,000 users
Quick Look
台湾在线旅行社易遊網周六发现会员中心遭异常外部网络攻击，导致超过69万名客户的历史订单联系资料遭未经授权访问。初步调查显示未涉及信用卡号码，公司已启动安全防护机制，委托第三方网络安全团队调查，并向主管机关及警方报案。
AI-generated summary
Why It Matters
易遊網是台湾的在线旅行社，其会员中心周六遭到异常外部网络攻击，导致历史订单中的客户联系资料被未经授权访问。公司已启动网络安全防御与响应机制，并委托第三方团队进行数字取证调查。
Online travel agency ezTravel （易遊網） on Saturday detected an abnormal external cyberattack on its member center, resulting in the unauthorized access of contact information from historical orders of more than 690,000 customers.
While a preliminary investigation showed that the breach did not involve credit card numbers, the company urged customers to remain vigilant against scams.
In a statement yesterday, ezTravel said that it immediately activated its cybersecurity defense and response mechanisms after detecting the attack, and successfully blocked the abnormal traffic.
It has also commissioned a third-party cybersecurity team to assist with the investigation and conduct digital forensics, the company said.
The compromised data potentially include names, e-mail addresses, phone numbers and product order information from historical records, ezTravel said.
After cross-referencing and removing duplicates, the number of affected customers exceeded 690,000, it said.
The agency has reported the incident to the competent authorities and police within the legal timeframe in accordance with personal data protection laws, it added.
The incident did not compromise credit card numbers, security codes or account passwords, nor did it leak customers' passport or ID card numbers, meaning the security of all financial transactions remains unaffected, ezTravel said.
The company apologized for the anxiety and concern caused to consumers, adding that it does not take threats to customer data security lightly and would not shirk its responsibilities.
Consumers have been notified via text messages and e-mails to warn of potential risks, ezTravel said.
Scam rings might use the stolen order information to impersonate customer service representatives or bank staff, it said.
Scammers often use excuses such as "abnormal orders" or "duplicate charges" to trick consumers into providing credit card information and SMS verification codes, or instruct them to operate ATMs and click on malicious links, it added.
The travel agency reminded its customers that it would never ask for account passwords or verification codes, or instruct them to operate an ATM to cancel installment payments via phone call, text message or e-mail.
What to Watch
AI outlook — possibilities, not facts
诈骗集团可能利用外泄的订单信息冒充客服或银行人员实施诈骗
Likely · Within days
Open Questions
- 攻击者的具体身份和来源
- 资料外泄是否会导致后续诈骗案件
- 公司将采取哪些具体补救措施赔偿受影响客户
