Data breach affects 23,549 customers of Singapore telco Simba, personal data protection commission investigating

On September 25, telecommunications company Simba revealed a data breach impacting 23,549 of its customers, disclosing that personal data such as names, identity card numbers, and dates of birth had been compromised. Additionally, the breach exposed customers' mobile phone numbers and email addresses associated with Simba service registrations. According to a statement issued by Simba, the incident was discovered a day earlier and subsequently contained and resolved.

The compromised information did not include credit card or bank account details, according to Simba. The company emphasized that there was currently no evidence suggesting the malicious misuse of the exposed data. Simba expressed serious concern over the incident and stated that immediate actions were taken to review and enhance existing security measures to safeguard its core infrastructure and systems. The telecommunication provider also mentioned its collaboration with relevant authorities in connection with the breach.

Affected customers are being notified individually via email, with the notification process expected to be completed within a week. When queried by CNA, Singapore's Personal Data Protection Commission (PDPC) confirmed awareness of the incident and confirmed that an investigation was underway. This comes as organizations worldwide face heightened scrutiny over the protection of personal data, especially sensitive information such as identity card numbers and dates of birth that can potentially be exploited for identity-related fraud.