Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected
The incident involved access by an unauthorised external party to the app.
A data breach has occurred involving a meal ordering app called Tappee, according to food solutions provider SATS. The breach exposed personal information such as students' names, concession card numbers, and financial assistance status for four schools in Singapore. SATS identified unauthorized access to the Tappee platform, which is developed and maintained by a third-party technology vendor called Serial Multivision.
The cybersecurity incident was detected through SATS' monitoring capabilities and prompted an immediate suspension of access to the Tappee application by Serial. Compromised information included student names, email addresses, financial assistance status, concession card numbers, and some parents' and guardians' email addresses.
No banking or credit card information, or details or images of student identification documents, were compromised. SATS stated that the breach did not affect its own IT infrastructure. The company is working with Serial to strengthen security safeguards and implement remediation measures. Tappee's website remains temporarily unavailable while security reviews and remediation work continue.
SATS has notified the Personal Data Protection Commission and will cooperate fully with relevant authorities. Meal ordering and delivery services to students continued without interruption, as orders are currently managed directly through participating schools. SATS acknowledged the incident's impact on affected students, parents, and schools, apologizing for any concern caused and assuring that it is committed to supporting the affected parties and implementing further cybersecurity enhancements.
Written by urgent.news from Straits Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
