SINGAPORE-CYBERCRIME-INTERPOL
On November 11, the Ministry of Digital Development released the results of its investigation into recent AI-related cyberattacks against Taiwanese companies, indicating that more than 10 companies and online platforms were affected, involving more than 1 million pieces of personal data.

The Ministry of Digital Affairs said on the 11th that nearly half of a series of recent cyberattacks targeting <chrome_annotation role="link">Taiwan companies and online platforms involved artificial intelligence (AI) tools, affecting more than 1 million personal records. Some of the attack traffic appeared to originate in Hong Kong, but authorities stressed that IP addresses alone cannot confirm the hackers’ actual location.

At a news conference in Taipei, the ministry said at least 10 companies and online platforms had recently come under attack. The affected data included names, telephone numbers, email addresses and order information. A preliminary investigation by cybersecurity personnel found that nearly half of the incidents involved AI technology.

Huang Cho-lun, an official with the ministry’s Administration for Cyber Security, said some of the attacks used an automated tool known as ARTEX. Developed in China, the tool can be used to test websites and systems for security vulnerabilities. AI technology allows attackers to identify system weaknesses more quickly and automatically, reducing the time and cost required to launch an attack.

Huang said hackers may have exploited weak passwords or software vulnerabilities that had not been patched in time. Using an analogy, he explained that AI can help attackers automatically locate entry points into systems and try different ways to get past security protections.

However, the ministry said its review of the cases so far had found no confirmation that credit card or other payment data had been leaked. Kung Hua-chung, president of the National Institute of Cyber Security, said the wave of attacks began around mid-September. Related cases were first reported in South Korea, while Taiwan had confirmed multiple attacks by Oct. 20, and the activity was continuing.

Kung said some of the attack traffic appeared to come from Hong Kong, while other attacks were relayed through servers in different countries. Minister of Digital Affairs Lin Yi-ching warned that the location shown by an IP address does not necessarily indicate where the attacker is actually based, meaning the source of the traffic alone cannot be used to identify those behind the attacks.

Authorities did not disclose the names of the affected companies, saying they wanted to avoid causing additional financial and reputational damage. The incident highlights how AI tools, while improving industrial efficiency, can also be used to automate cyberattacks, creating new challenges for corporate cybersecurity and personal data management. For details, see the Central News Agency report.