PChome Denies Settra Breach Claim as Bibian Confirms Customer Data Leak
Summary
Settra claimed it breached PChome and stole 102GB, but PChome says its review found no evidence of compromise and core systems remain operational. Separately, Bibian confirmed an internal data leak affecting some members and offered coupons.
Key points
- Settra claimed it accessed PChome’s web and payment systems on June 10 and stole 102GB, including member data and internal records; these allegations remain unverified.
- PChome said its initial investigation found no evidence of a breach of the parent company’s systems and that its main site, core operations, and payment channels remained operational.
- Bibian confirmed on June 16 that leaked data came from its internal systems and affected some members of its purchasing and Bibian Japan services.
- The exposed Bibian data reportedly included members’ names, phone numbers, addresses, and historical purchase and order details.
- Users reported receiving convincing phishing emails; the article says the messages used customer details and impersonated customer service in an installment-payment scam.
- Bibian reportedly worked with an external security team to remediate a vulnerability and offered affected members 2,500-yen shopping coupons on June 18.
Article Details
- Victim Organization
- PChome (網路家庭) and its subsidiary Bibian (比比昂)
- Incident Type
- Bibian confirmed a personal-data breach. Separately, ransomware group Settra claimed it had breached PChome; PChome denied finding evidence of intrusion into its core systems.
- Incident Date
- 2026-06-10
- Disclosure Date
- 2026-06-10
- Data Types Exposed
- Bibian: members’ names, phone numbers, addresses, historical purchases, and order details
- PChome (claimed, not independently verified): member personal data, operational records, system architecture diagrams, compliance and audit documents, and employee HR files
- Affected Records
- Bibian did not disclose a record count. Settra claimed PChome data from approximately 3.5 million members was taken; PChome said it found no substantive evidence of compromise.
- Affected Data Size
- Settra claimed 102 GB of PChome data was stolen; this claim was not substantiated in the article. Bibian did not disclose a data volume.
- Operational Impact
- PChome said its main site, core operational systems, and payment channels remained operational and that its initial investigation found no evidence of substantive intrusion. Bibian confirmed that leaked data originated from its internal systems, worked with an external security team to remediate the vulnerability, and offered affected members a 2,500-yen shopping coupon. The article also reports that some users received fraudulent messages using exposed Bibian order details.
- Ransom Or Extortion
- Settra listed PChome on its dark-web site and claimed an intrusion, publishing a 12-page report to apply pressure. The article reports no specific ransom demand, and PChome denied finding evidence of compromise. No ransom activity is reported for Bibian.
- Claim Status
- confirmed