More than 23,500 SIMBA customers have had their personal information exposed in a data breach, including their identity card numbers and dates of birth.
The telecommunications company said 23,549 customers were affected. The compromised information included names, identity card numbers, dates of birth, mobile numbers and email addresses belonging to customers who had registered for SIMBA services.
SIMBA discovered the breach on Thursday, 24 September, and issued a statement about the incident the following day. It said the incident had since been resolved.
No Credit Card or Bank Account Information Affected
While several pieces of personal information were exposed, SIMBA said credit card and bank account information was not at risk.
The company also said that, based on its investigations at the time of its 25 September statement, there was no indication that the affected information had been maliciously misused.
SIMBA said it had reviewed its existing security measures following the breach, including measures protecting its core infrastructure and systems.
The telco is also working with the relevant authorities over the incident.
PDPC Is Investigating the Breach
Singapore’s Personal Data Protection Commission (PDPC) told Mediacorp that it was aware of the incident and was investigating.
SIMBA has begun notifying the 23,549 affected customers by email. According to the company’s 25 September statement, it expected to complete the notification process within the following week.
As of the information publicly available by 28 September, SIMBA’s statement did not explain how the breach occurred. It also did not specify whether the affected group comprised mobile customers, broadband customers or both.
