MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed

Personal data of a subset of MoneySmart customers in Singapore and Hong Kong has been compromised following a cyberattack on the online financial portal's internal systems in October. An unauthorized third party gained access to sensitive customer information, including names, dates of birth, nationalities, personal identification numbers, contact details, income ranges, life stages, financial products owned, vehicle and insurance specifics.

MoneySmart promptly notified affected users via email on November 2 and 3, revealing that the breach occurred on October 29. The company is reaching out to customers individually to explain the data exposed and advise protective measures. Regulators in both countries have been notified, including the Personal Data Protection Commission and Monetary Authority of Singapore, alongside the Privacy Commissioner for Personal Data and Insurance Authority in Hong Kong.

Independent cybersecurity experts have been enlisted to investigate the breach. MoneySmart reassured customers that operations remain unaffected, emphasizing their commitment to customer support and system enhancement to prevent future occurrences. CEO Vinod Nair expressed deep regret for the incident, acknowledging the trust customers place in the company with their financial information.