Data breach at Singaporean software firm impacted over 128,000 individuals

Singapore-based software services provider Ezynetic experienced a significant data security incident that compromised the sensitive personal information of more than 128,000 individuals.

 

In a press release, the Ministry of Law of Singapore said that Ezynetic was in recent days a victim of a cyber attack that compromised the sensitive personal data of 12 licensed moneylenders’ customers.

 

“Ezynetic’s system, which is not hosted on or linked to the Government’s network, was accessed by a malicious actor and data was leaked. The data contains personal identifiable information belonging to an estimated 128,000 clients of the 12 LMLs. Data of the remaining 8 LMLs who use Ezynetic’s services was not affected,” reads the press release.

 

The moneylenders affected by the data security incident are Ban King Credit Ltd, Credit 21 Pte Ltd, Lending Bee Pte Ltd, Katong Credit Pte Ltd, Credit Thirty3 Pte Ltd, GS Credit Pte Ltd, 1AP Capital Pte Ltd, Creditmaster Pte Ltd, BST Credit Pte Ltd, U Credit (Pte) Ltd, Horison Credit Pte Ltd, and Credit Matters Pte Ltd.

 

As a containment measure, the Credit Bureau of Singapore has restricted access to the affected platform for all 20 affected moneylenders served by Ezynetic.

 

“MLCB’s online functions remain fully available to the other 133 LMLs in Singapore. Borrowers with queries may reach out to their respective LMLs for more information,” the ministry said.

 

“MinLaw as a regulator of LMLs takes a serious view of the data breach. The LMLs have a duty to protect any information in its possession or control. This includes information residing on their third party vendor systems,” it added.

 

MinLaw has launched an investigation to determine the nature and scope of the incident and has involved the Cyber Security Agency of Singapore and the Personal Data Protection Commission of Singapore (PDPC) to assist with the same. The department is also working with the Credit Bureau to help the moneylenders affected by the data security incident.