1.Date of occurrence of the event:2026/10/29
2.Company name:91APP, Inc.
3.Relationship to the Company (please enter ”head office” or
”subsidiaries”):Head office
4.Reciprocal shareholding ratios:NA
5.Cause of occurrence:
91APP held a press conference today (October 29, 2026) to provide an update
on its investigation into the cyberattack incident previously disclosed
through a material information announcement on the Market Observation Post
System (MOPS) on October 16.
91APP has engaged CyCraft Technology, an independent third-party
cybersecurity firm, to assist with the investigation. Current findings
cannot determine which brand clients’consumer personal data was actually
accessed without authorization. 91APP has therefore decided, on its own
initiative, to apply the most conservative approach and disclose the
maximum potential scope of impact.
The maximum potential scope of impact covers online orders placed between
April 4, 2025, and October 14, 2026, involving up to 1,329 brands and
4,798,255 consumers. The personal data potentially exposed includes names,
phone numbers, delivery addresses, email addresses (where provided), and
order records. It does not include passwords, credit card information, or
any payment data.
91APP launched an investigation immediately upon receiving the first report
from a brand client on October 4. The company blocked the attack on October
14, filed a police report and notified the relevant regulatory authority on
October 15, and issued a material information announcement on October 16.
The Administration for Digital Industries (ADI) under the Ministry of Digital
Affairs (moda) conducted an on-site administrative inspection on October 19
and reconfirmed on October 21 that the attack had been fully blocked.
91APP will proactively seek authorization from its brand clients to notify
potentially affected consumers on their behalf and centrally handle consumer
inquiries and compensation claims, with all associated costs borne by 91APP.
The company will also discuss compensation arrangements with brand clients.
The attack targeted one order database within Commerce Cloud, part of 91APP's
Commerce Solution. All other 91APP solutions, including their products,
services, and functions, continue to operate normally. 91APP will maintain
stable operations and support its brand clients through the peak
fourth-quarter retail season. The financial impact of the incident is still
being assessed and will be recognized and disclosed in accordance with
applicable accounting standards and regulatory requirements.
Chairman Steven Ho extended his deepest apologies for the concern and
distress the cyberattack incident has caused consumers, brand clients, and
investors.He pledged that 91APP will draw on its financial foundation and
operational strength to properly address the consequences of the incident
and rebuild stakeholder trust through concrete actions.
Cyberattack Incident Statement URL:
https://91app.com/91app-202610-security-incident/
6.Countermeasures:None
7.Any other matters that need to be specified(the information
disclosure also meets the requirements of Article 7, subparagraph 9
of the Securities and Exchange Act Enforcement Rules, which brings
forth a significant impact on shareholders rights or the price of
the securities on public companies.):None