Bank SinoPac confirms hacker attack behind unauthorized transfers of NT$41.76 million

Bank SinoPac confirmed on November 4, 2026 that the unauthorized transfers from customer accounts on November 3 were a hacker attack, replacing the program error explanation it first announced. In a notice on its website, the bank said outsiders took advantage of a security setting in the supplier's new online banking transaction system and found valid accounts by trial and error, targeting holders whose ID numbers share the same first letter. The bank said the method has been blocked, checks have been tightened, and threat details were shared with other banks through F-ISAC.

The attack made 427 transfers, most of about NT$100,000 each and NT$41.76 million in total, all to one Taipei Fubon Bank account, which was frozen. The bank's president put the affected customers at 418 at the November 4 apology, while the Financial Supervisory Commission had earlier put the count at 419. All funds and fees were refunded on November 3, the new system was taken offline, an outside security team was brought in, the bank plans to seek compensation from the supplier, and the case was referred to investigators. SinoPac said it found no evidence of customer data leakage.

Sources: Sheng; Mark Radar