What Happened
In March 2026, cybersecurity intelligence identified a high-priority leak of the New Power Party (NPP) Taiwan’s internal membership and supporter database (`npptw.org`), which was published by a threat actor on an underground forum amid heightened cyber tensions in Taiwan, including daily attacks on political networks. The exposed data included personally identifiable information (PII) such as full names, physical addresses, and dates of birth for party members and donors; approximately 33,000 unique email addresses and verified mobile phone numbers; and political profiling details like membership status, donation histories, and affiliations, posing risks of phishing, espionage, doxxing, and violations of Taiwan’s Personal Data Protection Act (PDPA). No exact number of total records was specified, but the incident followed the January 2026 takedowns of LeakBase and BreachForums, highlighting ongoing threats to Taiwanese democratic institutions.
