PChome Reportedly Hacked, Exposing Data on 3.5 Million Users and Pi Wallet

PChome subsidiary Pi Mobile Technology operates Pi Wallet, which has about 3.5 million users. Third-party payment services connect consumer transactions, accounting and financial services, meaning a ransomware breach could spread risk across the fintech supply chain. Cybersecurity firms said that, if the allegations are true, Pi Wallet could become Taiwan’s first third-party payment provider to suffer this type of attack.

On July 1, ransomware group Settra claimed it had breached PChome’s website and payment systems. It published a 12-page penetration report and 102GB of internal data on the dark web, saying the files included personal information on 3.5 million users, but did not disclose its ransom demand. PChome said its main website had not been breached and that Pi Wallet was still investigating. The Ministry of Digital Affairs will conduct an administrative inspection, while the Financial Supervisory Commission is working with the financial industry to strengthen cybersecurity.