Financial services firm MoneySmart hit by IT security breach, some customers' data copied

In emails sent to customers seen by CNA, MoneySmart said the compromised internal IT systems hold personal data, such as names and email addresses, that customers share with the company when they compare or apply for financial products.

The data breach, discovered on Oct 29, affected some MoneySmart customers in Singapore and Hong Kong, said the company. (Photo: iStock)

This audio is generated by an AI tool.

SINGAPORE: Financial services company MoneySmart said on Tuesday (Nov 3) that personal data of some of its customers was copied by an "unauthorised third party" in a data security incident.

It said that it discovered on Oct 29 that the third party had accessed some of its internal IT systems, and its investigation confirmed that some of its customers in Singapore and Hong Kong were affected.

The company stopped the unauthorised access and took steps to secure its systems soon after the discovery, said chief executive officer Vinod Nair in a note on the company's website.

MoneySmart also reported the incident to the relevant authorities and engaged independent cybersecurity and forensics experts to investigate further, he added.

CNA Games Guess Word Crack the word, one row at a time Buzzword Create words using the given letters Mini Sudoku Tiny puzzle, mighty brain teaser Mini Crossword Small grid, big challenge Word Search Spot as many words as you can Show More Show Less "I am deeply sorry to everyone affected. Customers trust us with information about their financial lives, and we take that responsibility very seriously," he said. MoneySmart is reaching out directly to affected customers to explain what data was compromised and the steps they can take to protect themselves, he added. "MoneySmart continues to operate as normal, and we are committed to supporting our customers ... We are reviewing everything that led to this incident and making the changes needed to prevent it from happening again." In emails sent to customers seen by CNA, MoneySmart said the compromised internal IT systems hold personal data, such as names and email addresses, that customers share with the company when they compare or apply for financial products. The company added that those who have submitted reward claims may also have had their shipping address and the application or policy reference number for the claimed product copied by the third party. It recommended customers to take precautionary steps, including checking their card statements and reporting any transaction they do not recognise to their bank promptly. They should also be wary of delivery or reward messages that ask them to confirm their details or pay a fee, and be alert to unexpected calls, emails and messages. The company said that it has informed the relevant regulators, including the Personal Data Protection Commission (PDPC). CNA reached out to MoneySmart for more information, including the number of customers affected. In response, the company forwarded the same statement that it had posted on its website, which does not answer the questions CNA submitted. CNA has also sought comment from the PDPC.

"I am deeply sorry to everyone affected. Customers trust us with information about their financial lives, and we take that responsibility very seriously," he said.

MoneySmart is reaching out directly to affected customers to explain what data was compromised and the steps they can take to protect themselves, he added.

"MoneySmart continues to operate as normal, and we are committed to supporting our customers ... We are reviewing everything that led to this incident and making the changes needed to prevent it from happening again."

The company added that those who have submitted reward claims may also have had their shipping address and the application or policy reference number for the claimed product copied by the third party.

It recommended customers to take precautionary steps, including checking their card statements and reporting any transaction they do not recognise to their bank promptly.

They should also be wary of delivery or reward messages that ask them to confirm their details or pay a fee, and be alert to unexpected calls, emails and messages.

The company said that it has informed the relevant regulators, including the Personal Data Protection Commission (PDPC).

CNA reached out to MoneySmart for more information, including the number of customers affected. In response, the company forwarded the same statement that it had posted on its website, which does not answer the questions CNA submitted.

CNA has also sought comment from the PDPC.

Get our pick of top stories and thought-provoking articles in your inbox

Stay updated with notifications for breaking news and our best stories

Join our channel for the top reads for the day on your preferred chat app

在 CNA 看到的发送给客户的电子邮件中，MoneySmart 表示，被入侵的内部 IT 系统保存着个人数据，例如姓名和电子邮件地址，这些数据是客户在比较或申请金融产品时与公司分享的。

MoneySmart公司表示，此次数据泄露事件于10月29日被发现，影响了新加坡和香港的部分客户。（图片：iStock）

这段音频由人工智能工具生成。

新加坡：金融服务公司 MoneySmart 周二（11 月 3 日）表示，在一次数据安全事件中，其部分客户的个人数据被“未经授权的第三方”复制。

该公司表示，10 月 29 日发现第三方访问了其部分内部 IT 系统，调查证实其在新加坡和香港的部分客户受到了影响。

公司首席执行官维诺德·奈尔在公司网站上的一份声明中表示，公司在发现未经授权的访问后，立即停止了访问，并采取措施保护其系统。

他还补充说，MoneySmart 也已将此事报告给相关部门，并聘请了独立的网络安全和取证专家进行进一步调查。

CNA游戏 猜词游戏 逐行破解单词 流行词游戏 用给定的字母组成单词 迷你数独 小谜题，脑力挑战 迷你填字游戏 小方格，大挑战 单词搜索 尽可能多地找出单词 显示更多 显示更少 “我对所有受影响的人深表歉意。客户信任我们，将他们的财务信息托付给我们，我们非常重视这份责任，”他说。他还补充道，MoneySmart正在直接联系受影响的客户，解释哪些数据遭到泄露以及他们可以采取哪些措施来保护自己。“MoneySmart将继续正常运营，我们致力于为客户提供支持……我们正在审查导致此次事件的所有因素，并做出必要的改变，以防止此类事件再次发生。” 在CNA看到的发送给客户的电子邮件中，MoneySmart表示，被入侵的内部IT系统存储着个人数据，例如姓名和电子邮件地址，这些数据是客户在比较或申请金融产品时与公司分享的。该公司补充说，那些提交了奖励申请的客户，其收货地址以及所申请产品的申请或保单参考编号也可能被第三方复制。该公司建议客户采取预防措施，包括核对银行卡账单，并立即向银行报告任何不明交易。客户还应警惕要求其确认个人信息或支付费用的送货或奖励信息，并对任何意外来电、电子邮件和短信保持警惕。该公司表示已将此事告知相关监管机构，包括个人数据保护委员会（PDPC）。CNA联系MoneySmart以获取更多信息，包括受影响的客户数量。该公司回复称，其已在网站上发布了相同的声明，但并未回答CNA提出的问题。CNA也已向PDPC寻求置评。

“我对所有受影响的人深表歉意。客户信任我们，将他们的财务信息托付给我们，我们非常重视这份责任，”他说。

他还补充说，MoneySmart正在直接联系受影响的客户，解释哪些数据遭到泄露以及他们可以采取哪些措施来保护自己。

“MoneySmart将继续正常运营，我们致力于为客户提供支持……我们正在审查导致此次事件的所有因素，并做出必要的改变以防止此类事件再次发生。”

该公司还补充说，那些提交了奖励申请的人的收货地址以及所申请产品的申请或保单参考编号也可能被第三方复制。

它建议客户采取预防措施，包括检查银行卡账单，并将任何不明交易及时报告给银行。

他们还应该警惕要求他们确认个人信息或支付费用的送货或奖励信息，并对意外的电话、电子邮件和短信保持警惕。

该公司表示，已将此事通知相关监管机构，包括个人数据保护委员会（PDPC）。

CNA联系了MoneySmart公司，希望了解更多信息，包括受影响的客户数量。该公司回复称，其已在其网站上发布了相同的声明，但该声明并未回答CNA提出的问题。

CNA也已向PDPC寻求置评。

订阅我们的邮件，即可获取精选热点新闻和引人深思的文章。

订阅通知，第一时间获取突发新闻和精彩报道。

加入我们的频道，即可在您常用的聊天应用上获取当日热门文章。