MoneySmart reports customer data breach in Singapore, HK

Financial services firm MoneySmart experienced an IT security breach on November 3, 2021, where unauthorized third-party individuals accessed certain company systems. The breach resulted in the unauthorized copying of personal data belonging to some of its customers in Singapore and Hong Kong. This data includes names and email addresses of customers who have applied for financial products with the company.

MoneySmart's chief executive officer, Vinod Nair, informed the company's website and customers about the incident on October 29. He stated that the company promptly stopped the unauthorized access and took measures to secure its systems after discovering the breach. Furthermore, the company reported the incident to the relevant authorities and engaged independent cybersecurity and forensics experts to conduct a thorough investigation.

In response to the incident, MoneySmart reached out directly to affected customers, explaining the type of data that was compromised and providing guidance on steps customers can take to protect themselves. This includes monitoring card statements for any unfamiliar transactions and being cautious of unsolicited delivery or reward messages. The company also emphasized that it has informed the relevant regulators, including the Personal Data Protection Commission (PDPC).

MoneySmart assured customers that the company continues to operate normally and is committed to addressing the issue by reviewing the incident and implementing necessary changes to prevent future occurrences. Despite the breach, the company still recommended customers to take precautionary measures to safeguard their personal information.