On 25 June 2025, the Personal Data Protection Commission (PDPC) and the Cyber Security Agency of Singapore (CSA) issued a joint advisory cautioning organisations against using NRIC numbers as a means of authenticating individuals' identities. Key Concerns: NRIC numbers are not secret and are often disclosed for legitimate purposes (e.g., registration,
On June 6, 2025, cybersecurity researchers from Cybernews and SecurityDiscovery.com uncovered a 631 GB unprotected database containing roughly 4 billion user records—the largest known cache of Chinese personal data ever found—exceeding previous incidents. What Was Exposed? This trove included: WeChat user IDs: Over 805 million records, likely sourced from China’s dominant super‑app. Financial information:
P2D Solutions wishes to take this opportunity to wish everyone a very healthy, wealthy and successful Year of the Snake. Happy Chinese New Year! 恭喜发财! P2D SOLUTION - THE PROFESSIONAL PDPA COMPLIANCE CONSULTANT & SERVICES TALK TO US TODAY For
RedMart fined S$72,000 for data breach resulting in online sale of customer data The names, email addresses and other personal data of around 898,791 individuals were stolen from a database in September 2020 and later put up for sale online. SINGAPORE: Grocery delivery service RedMart has been fined
Breach of the Protection Obligation by Thomson Medical 19 Dec 2022 Directions were issued to Thomson Medical to conduct scan of the web to ensure no publication of affected personal data online and to include in the review of its application deployment process, measures such as the arrangements for security testing and
Hackers target SingTel’s Dialog unit after huge Optus breach SINGAPORE - (Bloomberg) — A second Australian business owned by Singapore Telecommunications Ltd. suffered a cyberattack, compounding the data-security crisis at the company following the huge data breach at mobile-phone operator Optus. A hack on technology consulting company Dialog, which
Hackers targeted 8 Shangri-La hotels between May and July, guests' data potentially leaked SINGAPORE - A database breach has occurred at luxury hotel chain Shangri-La Group, potentially exposing the personal information of guests who had stayed at its hotels in Singapore, Hong Kong, Chiang Mai, Taipei and Tokyo. In
MyRepublic ordered to pay S$60,000 for failing to protect personal data of 80,000 customers SINGAPORE: MyRepublic Singapore has been ordered to pay a financial penalty of S$60,000 for failing to protect the personal data of almost 80,000 customers in a cyber incident last year. The Personal Data Protection Commission (PDPC)
Starbucks Singapore hit by data breach involving customers’ names, emails and mobile numbers "As Starbucks Singapore does not store credit card information as per our security data practice, please (be) rest assured that no customer credit card details will be affected," it added. Starbucks said it has implemented additional
Data Protection Trustmark (DPTM) Every day, we may be sharing our personal data to organisations for different purposes, be it on social media or when we make a transaction online. So how can we be sure that our personal data are left in good hands? Pro-tip: look out
