Data breach at broadband provider WhizComms affects 24,000 customers

A data breach incident detected on April 21 has impacted roughly half its customer base, about 24,000 customers, of broadband service provider WhizComms, offering services like home broadband service and IDD voice service in Singapore.

On May 10, the affected individuals received an e-mail informing them that a third party accessed the firm’s Web server and downloaded scanned images of their personal information.

Most of the information downloaded was scanned images of NRICs needed to register for the broadband service. The third-party has also downloaded some scanned images of visa approval documents and work permits.

According to a spokesman, the contact and payment information was not stolen. He stated that the firm had "completely investigated" and that no other information besides what was found on the NRICs or work permits had been compromised.

While home addresses are among the details available from the images of scanned NRICs, he claims they may differ from the installation addresses for the broadband service, which the third party did not steal.

The service provider blocked any further third-party access and filed a police report after WhizComms staff discovered the breach while scanning the customer database, according to the spokesman. He declined to go into further detail, citing ongoing investigations.