Security notice
Do you sell through a hosted store platform in Taiwan? CYBERBIZ had part of its database accessed, and has not published a total count.
CYBERBIZ, a hosted online-store platform in Taiwan, had part of its database accessed without authorization. A November 11, 2026 report, cited by EffectStory, said 13 companies had named CYBERBIZ in filings since November 4. Hotai Motor filed on November 12, after that report, about its subsidiary's Daikin air-conditioner parts online store. EffectStory also names Sakura, Hey Song, Yao Ya's DR CYJ shop, and Zhanji International's Haoyang Life store. The filings describe order and personal data, such as emails and phone numbers. Only Hotai published a count for its own store: 141 orders and 132 personal-data records. The other filings EffectStory quotes do not give a platform-wide total, and the cause has not been disclosed. The filings reviewed here do not mention payment or card data. Some stores paused. This is not a named software flaw, so there is no CVE or patch to install. If you shopped at a store that runs on CYBERBIZ, watch for phishing and use official pages. If you run a store on a hosted platform, this is a reminder to know what customer data that vendor holds and how you would tell customers if it was breached. (EffectStory, Nov 12)
What happened
- Part of the CYBERBIZ database was accessed. Public filings quoted by EffectStory describe unauthorized, abnormal access to part of a database at CYBERBIZ, an outsourced hosted-store platform used by merchants in Taiwan. The filings do not say how the attacker got in. (EffectStory, Nov 12)
- How many companies have named it. EffectStory, citing a November 11 report in Economic Daily News, says 13 companies had filed notices since November 4, 2026, saying CYBERBIZ was breached. Hotai Motor's November 12 filing came after that report, so it is a further disclosure. EffectStory does not publish a full list of all 13. (EffectStory, Nov 12)
- Merchants named in the EffectStory article. Hotai Motor, for its subsidiary Hotai Service Marketing's Daikin air-conditioner parts online store (filed November 12). Sakura, for the SAKURA Taiwan official shopping mall (filed November 9). Hey Song, for its online store platform (notified November 9, filed November 10). Yao Ya, for its subsidiary Yaosheng Biotech's DR CYJ shop (filed November 9). Zhanji International, for its subsidiary Haoyang Life's online store (first filing November 6, supplementary filing November 9). Those are the merchants EffectStory names. (EffectStory, Nov 12)
- What data was described. The filings describe order and personal data, or order-related data. Only Hotai listed exact fields for its store: order number, recipient email and mobile number, and purchaser email and mobile number. The other four described the data in general terms. The filings quoted here do not mention payment or card data. (EffectStory, Nov 12)
- No published total for the platform. Hotai said 141 orders were affected at its Daikin parts store, involving 132 personal-data records. It is the only one of those five companies to give a count. Sakura said it had asked CYBERBIZ to clarify the affected scope. Yao Ya and Zhanji International each referred to a very small number of members or consumers who may be affected. Hey Song did not state a scale. There is no published total for every store on the platform, and we are not going to invent one. (EffectStory, Nov 12)
- What merchants have done. Several of the named companies said they warned members about fraud through their websites, email, SMS or Line, and asked CYBERBIZ to establish the cause and scope. Haoyang Life suspended its online store on November 6 and, as of the article, had not announced a reopening date. (EffectStory, Nov 12)
Who should worry
- You have shopped at a store that runs on the CYBERBIZ platform, including the stores named above.
- You run an online store on CYBERBIZ, or on another hosted store platform that holds your customer order data.
If you have never shopped at a CYBERBIZ store and you do not run a store on a hosted platform, this notice does not apply to you.
What to do now
If you shopped at a store that runs on CYBERBIZ. This follows what the named merchants have already told customers.
- Use official pages. Go to the store's own website yourself. Do not use a link from an unexpected message.
- Watch for impersonation. Names, emails, phone numbers and order details are enough to make a fake "confirm your order" or refund message look real. Do not give anyone a password, a card number or a one-time code.
- Wait for the store if it has something specific to tell you. Some merchants have already emailed, texted or messaged members they think may be involved. There is no published platform-wide list of affected shoppers. Do not assume your data was accessed, and do not assume it was not.
If you run an online store, especially on a hosted platform. These are general steps. We are not claiming any tool, including EverThread, would have stopped this attack.
- If you use CYBERBIZ, follow the platform and your regulator for official updates, and tell customers through your own official channels. Do not wait for a complete investigation if you already have a preliminary sense of who may be involved.
- Know what customer data your platform still holds, including order records, emails and phone numbers, and how you would be told if that vendor was breached.
- Know how you would cut off a vendor and notify customers if you had to, including who can approve that step.
What to send your developer, agency or host
CYBERBIZ, a hosted online-store platform in Taiwan, had part of its database accessed without authorization. A November 11 report cited by EffectStory said 13 companies had named CYBERBIZ in filings since November 4. Hotai Motor filed on November 12 about its subsidiary's Daikin parts store (141 orders and 132 personal-data records). EffectStory also names Sakura, Hey Song, Yao Ya's DR CYJ shop and Haoyang Life. The filings describe order and personal data. There is no published total for the platform, the cause has not been disclosed, and the filings reviewed here do not mention payment or card data. Please tell us whether we use CYBERBIZ or another hosted store platform, what customer order and contact data that vendor holds, how we would be notified if it was breached, and how we would warn customers about phishing. Source: EffectStory, November 12, 2026.
Common questions
Does this mean my site was hacked?
No. This notice is about a breach at CYBERBIZ, a hosted store platform. It does not mean your own site was hacked unless you run a store on that platform. The useful lesson for store owners is to know what customer data a vendor holds and how you would respond.
Can EverThread tell me if I am affected?
No. EverThread does not test for this. We check your home page from the outside, the way a browser sees it. We cannot see a store platform's customer records, and we cannot tell you whether your order was involved.
How many people were affected?
There is no published total for the CYBERBIZ platform. Hotai published a count only for its own Daikin parts store: 141 orders and 132 personal-data records. The other filings EffectStory quotes either give no number or refer to a very small number still being clarified. (EffectStory, Nov 12)
Was card data taken?
The filings quoted by EffectStory do not mention payment or card data. That is not the same as a guarantee that no payment data exists anywhere on the platform. Watch official updates from the store you used.
How did the attacker get in?
The filings do not say. The cause has not been disclosed. (EffectStory, Nov 12)
Is there anything to update?
No. This was an attack on a vendor's systems, not a named flaw in software you run on your own site. The general steps for store owners above are worth doing anyway.
Where can I follow official updates?
EffectStory reported the filings on November 12, 2026, quoting merchant notices and a November 11 Economic Daily News report. Watch the official site of the store you used. All current notices are on our notices page.
Security alerts by email
Hear about the next one first.
When a flaw puts websites at risk, we send one email: what happened, who it affects and what to do. It's free, whether or not you use EverThread.
Sources
- EffectStory: Hotai Joins Sakura and Hey Song in CYBERBIZ Breach Filings, November 12, 2026, citing merchant filings and a November 11 Economic Daily News report.