The breach compromised personal information such as customer names, email addresses, shipping addresses, and product application or policy reference numbers. MoneySmart has contained the unauthorized access and brought in external forensics experts to assist with the investigation while maintaining regular business operations. The company is directly contacting affected users to detail the compromised information and outline protective measures. Although the firm has notified relevant regulatory bodies, it has not disclosed the total number of individuals impacted.
Key points
Affected customers are advised to inspect their payment card statements promptly for any…: Affected customers are advised to inspect their payment card statements promptly for any unrecognized financial transactions.
Users must remain alert for suspicious delivery or reward communications that ask for per…: Users must remain alert for suspicious delivery or reward communications that ask for personal details or fee payments.
Regulators including the Personal Data Protection Commission were informed, though MoneyS…: Regulators including the Personal Data Protection Commission were informed, though MoneySmart has not revealed the total count of impacted users.
Sources checked by our analysis pipeline: 1
In emails sent to customers seen by CNA, MoneySmart said the compromised internal IT systems hold personal data, such as names and email addresses, that customers share with the company when they compare or apply for financial products.
SINGAPORE: Financial services company MoneySmart said on Tuesday (Nov 3) that personal data of some of its customers was copied by an "unauthorised third party" in a data security incident.
It said that it discovered on Oct 29 that the third party had accessed some of its internal IT systems, and its investigation confirmed that some of its customers in Singapore and Hong Kong were affected.
The company stopped the unauthorised access and took steps to secure its systems soon after the discovery, said chief executive officer Vinod Nair in a note on the company's website.
MoneySmart also reported the incident to the relevant authorities and engaged independent cybersecurity and forensics experts to investigate further, he added.
"I am deeply sorry to everyone affected. Customers trust us with information about their financial lives, and we take that responsibility very seriously," he said.
Singapore's three public healthcare clusters were forced onto manual workarounds after an incomplete vendor update disabled domain name services across both primary and backup systems. The preventable lapse disrupted appointments, billing, and pharmacy operations nationwide, though essential clinical care continued without data breaches or patient safety incidents. Authorities are now overhauling infrastructure dependencies and oversight mechanisms to prevent similar single-point network failures.
Cyber attackers penetrated the personal finance portal's internal systems on Oct. 29, copying sensitive records submitted by customers seeking credit cards, loans, and insurance products. The incident exposed identifying credentials and financial profiles across two major Asian markets, prompting corporate outreach and regulatory notifications. The platform has contained the intrusion while forensic investigators assess the full scope of the compromise.
The unauthorized intrusion into the financial portal's internal systems exposed sensitive identity documents, income brackets, and insurance records across two key Asian markets. Independent digital forensics experts have been engaged to investigate the intrusion while the platform continues standard daily operations. Regulators across both jurisdictions have been formally notified as the company works to prevent future network vulnerabilities.