Data Breach Exposes Personal Information of 70,000 Individuals in Singapore

A cybersecurity incident involving IBM has compromised the personal data of approximately 70,000 individuals in Singapore. The Singapore Land Authority (SLA) reported unauthorized access to a dataset created for vendor development and testing, which was intended to contain only mock and anonymized data. However, real information, including names, NRIC numbers, and past property addresses, was exposed. The dataset was created in 1998 and updated periodically, but investigations revealed it was not properly anonymized. SLA confirmed that the affected environment is separate from operational systems, ensuring no compromise to live systems. IBM has revoked access to the affected environment, and SLA is notifying affected individuals. A police report has been filed, and the Personal Data Protection Commission has been notified. Investigations are ongoing to determine the cause of the breach.

Key Points: • Unauthorized access to a dataset containing real personal data of 70,000 individuals. • The dataset was intended for development and testing but was not properly anonymized. • SLA is working with IBM and authorities to investigate and has begun notifying affected individuals.