TechnologyTuesday, November 10, 20261 min read

SATS meal ordering app Tappee suffers cyber breach; four schools affected

By Straits Times Singapore · Published by Everything Blog

In short

The cybersecurity breach targeted the Tappee platform, which is developed and maintained for four local schools by vendor Serial Multivision. Compromised information spans student names, concession card numbers, financial assistance statuses, and a small batch of biometric and allergy records. SATS verified that financial data was not involved because the application does not collect banking or payment card information. While the vendor patches the security flaws, meal services remain active through direct coordination with school administrators.

Key points

Food services remain fully operational as schools handle orders directly during the platf…: Food services remain fully operational as schools handle orders directly during the platform suspension.
The Personal Data Protection Commission was notified while affected individuals are conta…: The Personal Data Protection Commission was notified while affected individuals are contacted regarding the breach.
Core SATS corporate IT systems and user payment information were entirely unaffected by t…: Core SATS corporate IT systems and user payment information were entirely unaffected by the incident.

Sources checked by our analysis pipeline: 1

- SATS said its school meal app Tappee suffered a cyber breach through a vulnerability, affecting four Singapore schools and exposing student and parent data.

- Compromised details include names, e-mail addresses, concession card numbers, financial assistance status, and some allergy, height, weight and caloric intake records.

- SATS has suspended Tappee, notified the authorities, and said meal ordering and delivery will continue while it fixes the security flaws.

AI generated

SINGAPORE – An app for ordering school meals suffered a data breach, with personal information such as students’ names, concession card numbers and financial assistance status compromised.

In a statement on Nov 10, food solutions provider SATS said it identified a cybersecurity incident involving malicious access by an unauthorised external party to Tappee, a school meal ordering app.

The app was developed and is maintained by a third-party technology vendor, Serial Multivision. The Tappee platform is currently implemented across four schools in Singapore, SATS said, without specifying the four schools.

SATS did not say how many people were affected, and when it discovered the breach.

SATS said: “Unauthorised malicious…

AI Analysis

Tone

Negative

In short

Key Points

Food services remain fully operational as schools handle orders directly during the platf…: Food services remain fully operational as schools handle orders directly during the platform suspension.
The Personal Data Protection Commission was notified while affected individuals are conta…: The Personal Data Protection Commission was notified while affected individuals are contacted regarding the breach.
Core SATS corporate IT systems and user payment information were entirely unaffected by t…: Core SATS corporate IT systems and user payment information were entirely unaffected by the incident.

Topics

Technology

Was this summary useful?

AI Analysis

Tone

Negative

In short

Key Points

Food services remain fully operational as schools handle orders directly during the platf…: Food services remain fully operational as schools handle orders directly during the platform suspension.
The Personal Data Protection Commission was notified while affected individuals are conta…: The Personal Data Protection Commission was notified while affected individuals are contacted regarding the breach.
Core SATS corporate IT systems and user payment information were entirely unaffected by t…: Core SATS corporate IT systems and user payment information were entirely unaffected by the incident.

Topics

Technology

Was this summary useful?

SPH Media hit by cyberattacks; says no customer financial data or access exposed
Investigators believe a single threat actor orchestrated the coordinated intrusion across five systems, exposing non-financial personal records belonging to roughly 9 percent of the publisher's database. Outside cybersecurity specialists were engaged to contain the breach, while regulatory and law enforcement bodies across Singapore received formal incident reports. This security failure contributes to a troubling surge of high-profile digital attacks targeting major corporate networks throughout the country.
2 min read
Wave to pay your train fare: Innovations showcased at transport summit in Suntec
Global transit leaders gathered to examine emerging technologies aimed at modernizing urban commutes and addressing infrastructure constraints. The event emphasized contactless station access, artificial intelligence for emergency vehicle navigation, and space-saving safety retrofits for rail networks. These developments signal a concerted push toward automated, high-efficiency transit systems across major metropolitan hubs.
5 min read
Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected
Food solutions provider SATS has temporarily suspended the platform developed by third-party vendor Serial Multivision while cybersecurity reviews and remediation efforts take place. The incident exposed student identification data and parental contact details across four Singapore institutions, though core meal delivery operations remain uninterrupted under direct school supervision. Regulatory authorities have been notified alongside impacted families to address potential privacy risks.
2 min read

SATS meal ordering app Tappee suffers cyber breach; four schools affected

In short

Key points

More in Technology