[Investigating][Severity: Critical][Credential abuse]

ABC TV: Furulab account takeovers expose eight members’ data

Stolen credentials accessed eight Furulab accounts, exposing personal data and deleting one saved card record; the service was suspended.

Disclosed

2026-11-02

Organizations involved

Leaked or at risk

Downtime

Unknown

Accounts affected or at risk

What happened

ABC TV disclosed unauthorized Furulab logins on 20 October using email addresses and passwords obtained elsewhere. Eight members’ information was viewed. The service was suspended at 19:30 on 26 October and remained unavailable on 2 November. [1]

Impact and response

Exposed fields were names and Amazon gift-card lists for eight members; addresses, phones, birth dates, gender and emails for three; partial card numbers for four; and donation histories for two. Full card numbers and security codes were not viewable. One saved card record was deleted, but no fraudulent payments, donations or gift-card theft were found. The eight passwords were reset; additional authentication and login notifications are planned. [1]