{
  "id": 19442443,
  "title": "Cyberattack on Singapore school meal app exposes children’s personal data across four schools",
  "url": "https://urgent.news/2026/11/11/cyberattack-on-singapore-school-meal-app-exposes-childrens-personal",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-11T04:06:56.000Z",
  "source": {
    "name": "Malay Mail",
    "slug": "malay-mail-malaymail",
    "url": "https://www.malaymail.com/news/singapore/2026/11/11/cyberattack-on-singapore-school-meal-app-exposes-childrens-personal-data-across-four-schools/242811"
  },
  "original_language": "en",
  "account": "A cyberattack compromised a school meal-ordering app used by four Singapore schools, exposing students' personal information including financial assistance status and sensitive health data on November 11. The breach occurred due to an unauthorised external party exploiting a security vulnerability in the platform, Tappee, developed by third-party technology vendor Serial Multivision. Data leaked included student names, email addresses, concession card numbers, financial assistance statuses, along with some parents' and guardians' email addresses. A small number of records also contained students' allergy profiles, height, weight, and caloric intake information. SATS, the food solutions provider behind the app, declined to identify the four schools involved, citing privacy concerns. The breach did not compromise banking or credit card information, nor any student identification documents or images. SATS immediately suspended the app and instructed Serial to halt access to Tappee. The company's IT infrastructure remained intact. School meal services continued, with orders now handled directly through participating schools. SATS is collaborating with Serial to address the vulnerability and enhance security measures. The Personal Data Protection Commission (PDPC) in Singapore is investigating the incident. SATS has notified affected individuals and apologised for the concern caused. The number of students impacted remains undisclosed.",
  "summary": "SINGAPORE, Nov 11 — A cyberattack on a school meal-ordering app used by four Singapore schools has exposed student...",
  "key_points": [
    "Singapore school meal app hacked, exposing personal data of students.",
    "Attack exploited security vulnerability in Tappee platform.",
    "SATS and Serial Multivision investigating breach and enhancing security."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}