Intruders copied user data including vehicle information, owned financial products, and contact details during the late October breach. Chief executive Vinod Nair confirmed that unauthorized access was terminated immediately upon discovery, keeping platform operations running normally. The firm has started notifying impacted customers directly to explain the extent of the compromised records and provide guidance on personal security measures.
Key points
Regulators in Singapore and Hong Kong, including the Monetary Authority of Singapore, hav…: Regulators in Singapore and Hong Kong, including the Monetary Authority of Singapore, have been informed about the breach.
MoneySmart maintains that unauthorized access was immediately terminated, allowing regula…: MoneySmart maintains that unauthorized access was immediately terminated, allowing regular platform operations to continue without interruption.
Affected individuals are being contacted directly by the company with specific details on…: Affected individuals are being contacted directly by the company with specific details on exposed data and recommended safeguards.
Sources checked by our analysis pipeline: 1
MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed
- MoneySmart said hackers breached its internal IT systems on Oct 29 and copied some customer data in Singapore and Hong Kong.
- Exposed details may include names, dates of birth, ID numbers, e-mail addresses, mobile numbers, income ranges, and vehicle or insurance information.
- The firm alerted regulators, hired cybersecurity experts, and said it stopped the unauthorised access, kept operations normal, and will make changes to prevent it happening again.
AI generated
SINGAPORE – The personal data of some MoneySmart customers in Singapore and Hong Kong has been compromised after hackers breached the personal finance portal’s internal IT systems in October.
In an e-mail sent to affected users on Nov 2 and 3 and seen by The Straits Times, the platform said an unauthorised third party gained access to some of its internal information technology systems on Oct 29.
“These systems hold personal data that customers share with us when they compare or apply for financial products through MoneySmart,” it said.
Singapore's three public healthcare clusters were forced onto manual workarounds after an incomplete vendor update disabled domain name services across both primary and backup systems. The preventable lapse disrupted appointments, billing, and pharmacy operations nationwide, though essential clinical care continued without data breaches or patient safety incidents. Authorities are now overhauling infrastructure dependencies and oversight mechanisms to prevent similar single-point network failures.
Unauthorized access to internal systems resulted in the copying of user records across Singapore and Hong Kong after being detected on October 29. The incident exposed contact details and sensitive reward claim information for individuals using the platform to compare or apply for financial products. Company operations remain normal while regulators, including the Personal Data Protection Commission, have been notified and external cybersecurity investigators examine the scope.
Cyber attackers penetrated the personal finance portal's internal systems on Oct. 29, copying sensitive records submitted by customers seeking credit cards, loans, and insurance products. The incident exposed identifying credentials and financial profiles across two major Asian markets, prompting corporate outreach and regulatory notifications. The platform has contained the intrusion while forensic investigators assess the full scope of the compromise.