Channelnewsasia Tappee App Data Breach Affects Four Schools in Singapore
Article Content
- •Tappee app suffered a data breach affecting four schools in Singapore.
- •Compromised data includes student names, email addresses, and health information.
- •No banking data was compromised; SATS's IT infrastructure remains secure.
On November 10, 2026, SATS reported a cybersecurity incident involving Tappee, a school meal ordering app used in four Singapore schools. The breach allowed unauthorized access to student names, email addresses, financial assistance statuses, and some health-related data. No banking or credit card information was compromised, and SATS confirmed that its own IT systems were not affected. The breach was attributed to a vulnerability in the Tappee platform, which is maintained by the third-party vendor Serial Multivision. SATS has temporarily suspended the app while working on security improvements and has notified the Personal Data Protection Commission (PDPC). Meal services remain uninterrupted as orders are managed directly through the schools. SATS is in the process of informing affected individuals and providing support.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Doctor Anywhere in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What personal data was compromised?
How is SATS addressing the breach?
Will meal services be affected?
Continue Reading
Critical RCE and LPE Vulnerabilities in Quest Foglight for Databases On November 3, 2026, the Zero Day Initiative disclosed multiple critical vulnerabilities in Quest Foglight for Databases, including six remote code execution (RCE) flaws and two local privilege escalation (LPE) vulnerabilities. The most severe RCE vulnerabilities, CVE-2026-92189 and CVE-2026-92190, allow…