Taiwanese NPO Donation System netiCRM Breached; Over 20 Organizations Alert Public Against Scams

A cybersecurity incident has impacted netiCRM, a donation management platform widely utilized by non-profit organizations in Taiwan. System vendor NETivism reported that certain servers were breached by external attackers between the night of November 8 and early morning of November 9, 2026. More than 20 non-profit entities, including Citizen Congress Watch and the Judicial Reform Foundation, have issued alerts advising donors to beware of phishing attempts, with some pausing online donation services. According to NETivism, attackers obtained credentials to an internal code management system and exploited a software vulnerability to gain administrative control over a single server at 1:55 AM on November 9, with connections severed by 3:30 AM. As a precaution, backend administrative accounts and email relay settings are considered potentially compromised, though backend passwords were stored in hashed format. The vendor has notified the Ministry of Digital Affairs and police, implemented credential resets, patched vulnerabilities, and initiated environment rebuilds while investigating the extent of data exposure.

Key takeaways

• Vendor NETivism detected a server breach on November 9, 2026, where attackers used compromised credentials and flaws to gain administrative access before connections were terminated at 3:30 AM.
• Over 20 Taiwanese NPOs issued security notices, updating administrative passwords or temporarily suspending online donations to mitigate fraud risks.
• Administrative credentials and email relay settings are treated as potentially exposed; passwords were hashed, and the scope of donor data theft remains under investigation.
• The vendor reported the incident to the Ministry of Digital Affairs and police, rotated server keys and credentials, and is rebuilding client system environments.