{
  "id": 19317360,
  "title": "Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected",
  "url": "https://urgent.news/2026/11/10/meal-ordering-app-tappee-suffers-cyber-breach-says-sats-four-schools",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-10T09:59:26.000Z",
  "source": {
    "name": "Straits Times",
    "slug": "straits-times",
    "url": "https://www.straitstimes.com/singapore/sats-meal-ordering-app-tappee-suffers-cyber-breach-four-schools-affected"
  },
  "original_language": "en",
  "account": "A data breach has occurred involving a meal ordering app called Tappee, according to food solutions provider SATS. The breach exposed personal information such as students' names, concession card numbers, and financial assistance status for four schools in Singapore. SATS identified unauthorized access to the Tappee platform, which is developed and maintained by a third-party technology vendor called Serial Multivision. The cybersecurity incident was detected through SATS' monitoring capabilities and prompted an immediate suspension of access to the Tappee application by Serial. Compromised information included student names, email addresses, financial assistance status, concession card numbers, and some parents' and guardians' email addresses. No banking or credit card information, or details or images of student identification documents, were compromised. SATS stated that the breach did not affect its own IT infrastructure. The company is working with Serial to strengthen security safeguards and implement remediation measures. Tappee's website remains temporarily unavailable while security reviews and remediation work continue. SATS has notified the Personal Data Protection Commission and will cooperate fully with relevant authorities. Meal ordering and delivery services to students continued without interruption, as orders are currently managed directly through participating schools. SATS acknowledged the incident's impact on affected students, parents, and schools, apologizing for any concern caused and assuring that it is committed to supporting the affected parties and implementing further cybersecurity enhancements.",
  "summary": "The incident involved access by an unauthorised external party to the app.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}