MoneySmart Customers’ Personal Data Exposed in Hack
Hackers gained access to internal systems of the personal finance platform MoneySmart in October, copying personal data belonging to some customers in Singapore and Hong Kong.
- Company
- MoneySmart, a platform for comparing and applying for credit cards, personal loans and travel insurance
- Access gained
- 29 October, to some internal IT systems
- Customers notified
- By email on 3 November; the number affected has not been disclosed
- Regulators involved
- Singapore’s Personal Data Protection Commission and Monetary Authority of Singapore, and Hong Kong’s privacy and insurance regulators
What Was Exposed
The company said the copied information may include personal particulars such as names, dates of birth, nationality and identification numbers. It may also include contact details, financial profiles such as income range and products held, and vehicle and car insurance information.
The Company’s Response
MoneySmart said it stopped the unauthorised access as soon as it was discovered and has secured its systems. It is contacting affected customers directly and has hired independent cybersecurity and forensic experts. Chief executive Vinod Nair apologised to those affected and said the company is reviewing what led to the breach. The platform says its services continue to operate as normal.
Regulatory Follow-Up
The Monetary Authority of Singapore is following up closely, has directed the company to contain the breach and secure its IT environment, and has asked for a full root cause analysis. Singapore’s Personal Data Protection Commission is investigating the case. The Cyber Security Agency of Singapore and the police were also contacted for comment.
Protecting Yourself
Anyone who uses a financial comparison platform should watch for unexpected messages or calls that use details from their application, and should check the company’s official channels before sharing further information. Customers who receive a notice from MoneySmart should follow the steps it recommends.