Teollimi

91APP (online stores of 1,329 brands in Taiwan) data breach

Was I affected?

91APP (online stores of 1,329 brands in Taiwan) confirmed a breach affecting about 4.8 million people, exposing names, phone numbers, email addresses and addresses. You may be affected if you ordered online from a brand's website or app that runs on 91APP between April 4, 2025 and October 14, 2026; reported brands include Cosmed, adidas and Muji in Taiwan.

91APP (online stores of 1,329 brands in Taiwan) breach facts
AnnouncedOct 29, 2026
When it happenedOrders placed April 4, 2025 to October 14, 2026
CountryTaiwan
People affected4.8 million
Data exposedNames, Phone numbers, Email addresses, Addresses and Other details
StatusConfirmed by the company or a regulator filing

What happened

Taiwanese e-commerce software company 91APP said on October 29, 2026 that attackers illegally accessed an order database in its Commerce Cloud system, which powers the online stores and apps of many brands. At most about 4.8 million consumers who placed online orders with 1,329 brands between April 4, 2025 and October 14, 2026 may be affected, with names, phone numbers, email addresses, delivery addresses and order records exposed. 91APP says card data and member login passwords were not in the database. It began notifying affected consumers by email from November 2 and is taking compensation applications on its website until February 1, 2027, even from people who lost no money; the amount has not been announced.

What should I do?

  1. Be wary of calls or messages that quote your order details and claim there is a problem with a payment or installment plan; hang up and check with the brand directly or call Taiwan's 165 anti-fraud hotline.
  2. Never give bank account numbers, card numbers or online banking logins to anyone claiming to be from a store or 91APP, even if they know what you bought.
  3. Apply for compensation through 91APP's official website before February 1, 2027, filing separately for each brand you ordered from.
  4. Don't click links in unexpected order or delivery messages; open the brand's official app or website yourself.
XRedditWhatsApp

Check the other services you use →

Sources