Security lapse exposes personal data of 6,500 Singapore accountants

Security lapse exposes personal data of 6,500 Singapore accountants 1

A folder containing personal data of 6,541 accountants in Singapore was “inadvertently” sent to multiple parties, in a security lapse that was uncovered only months after when a review was conducted. The incident exposed personal details such as names, national identification number, date of birth, and employment information. 

The incident occurred under the watch of the Singapore Accountancy Commission (SAC), a statutory body under the Ministry of Finance, which said in a statement Friday that 41 individuals in 22 organisations had received the folder containing the personal data. 

The details were sent out in multiple email messages between June 12 and October 22 this year to the 22 organisations, which comprised 21 Accredited Training Organisations (ATO) and one vendor. The email was sent to inform them of “administrative matters”, the SAC said. 

ZDNet understands that the email was sent to new ATOs to notify them of various administrative issues such as logos to use. There are more than 300 of such organisations in the country.

The affected individuals were past and current candidates of the Singapore Chartered Accountant Qualification programme as well as ATO personnel and other executives involved in the administration of the qualification scheme before May 17, 2019.  

SAC said it uncovered the lapse on November 7 after it implemented a “new data protection filter” as part of the recommendations by the Public Sector Data Security Review Committee. Four days later, on November 11, the commission contacted the 22 organisations that received the folder “to request that they delete the data folder” as well as ascertain whether the folder had been forwarded to other parties. 

To date, all 22 companies said they had deleted the folder, including any forwarded data. The SAC, however, did not disclose if, and how many, other parties had received or accessed the data. 

It said all affected individuals were informed, on November 22, about the “unintentional disclosure”. It added that it had notified the Personal Data Protection Commission about the lapse. 

“The SAC takes a serious view of this Incident and deeply regrets this mistake. The SAC will set up a panel to review the incident and make any necessary recommendations,” the SAC said, adding that this panel would be comprised members from the SAC board as well as the Smart Nation and Digital Government Office and the Public Service Division.

ZDNet has sent the SAC followup questions regarding the security lapse, including whether efforts were made to ascertain if the personal had been listed on the dark web and whether other lapses were uncovered during the review. This article will be updated when the commission responds. 

The Singapore government in July said its agencies would roll out several new “technical measures” for existing and new systems, including automated detection of email containing sensitive data and stronger encryption for files. These were part of “interim” recommendations deemed necessary following a review of the public sector’s cybersecurity infrastructure and policies, which itself was carried out after a series of data breaches involving government entities.

A committee set up to evaluate how the government secured and protected citizens’ data stressed the need to boost the sector’s data security regime amidst rising threats. It added that government systems were increasingly complex and there was growing demand for the use of data to facilitate digital services for the public.

The Singapore government, though, remained firm on its view that the public sector must be excluded from the country’s Personal Data Protection Act because of “fundamental differences” in how these organisations operated, which required “a different approach” to personal data protection compared to the private sector. 


About the author

E-Crypto News was developed to assist all cryptocurrency investors in developing profitable cryptocurrency portfolios through the provision of timely and much-needed information. Investments in cryptocurrency require a level of detail, sensitivity, and accuracy that isn’t required in any other market and as such, we’ve developed our databases to help fill in information gaps.

Related Posts

E-Crypto News Executive Interviews

Crypto Scams

Beanstalk Farms Loses $80M In A Massive DeFi Governance Flash-Loan Hack
Beanstalk Farms Loses $80M In A Massive DeFi Governance Flash-Loan Hack
April 23, 2022
Joon Pak Head of Crypto at Prove talks to Us about Crypto Fraud And More
April 11, 2022
Mintable CEO Zach Burks Talks to Us about the Opensea Stolen NFTs and Their Recovery
March 21, 2022
Crypto Crime
Crypto Crime Surges To Record Highs As Thieves Follow Market Buzz – Chainalysis 2022 Report
February 24, 2022
Bots Circumvent 2FA Login At Coinbase And Other Crypto Exchanges In 2022
Bots Have Circumvented 2FA Logins At Coinbase And Other Crypto Exchanges In 2022
February 17, 2022

Automated trading with HaasBot Crypto Trading Bots

Blockchain/Cryptocurrency Questions and Answers

Roundtable Interview-What is the Effect of The Russia-Ukraine War on Cryptocurrency Prices?
March 4, 2022
How Does Bitcoin Casino Work + 2021 Beginner’s Guide
November 8, 2021
How to Buy and Sell Cryptocurrency
November 8, 2021
What Are Bitcoin Futures And How Will They Work In 2022?
November 4, 2021
The Unconventional Guide to Ethereum
October 28, 2021

CryptoCurrencyUSDChange 1hChange 24hChange 7d
Bitcoin28,840 0.33 % 2.60 % 5.08 %
Ethereum1,752.2 0.68 % 4.79 % 13.42 %
Tether1.001 0.06 % 0.07 % 0.01 %
USD Coin0.9989 0.16 % 0.08 % 0.04 %
BNB302.51 0.09 % 3.04 % 1.66 %
XRP0.3855 0.24 % 3.16 % 8.58 %
Binance USD1.002 0.06 % 0.23 % 0.18 %
Cardano0.9566 0.22 % 0.68 % 6.96 %
Solana42.06 0.88 % 5.55 % 19.62 %
Dogecoin0.08153 0.62 % 2.56 % 6.36 %

Bitcoin (BTC) $ 28,856.00
Ethereum (ETH) $ 1,756.32
Tether (USDT) $ 1.00
USD Coin (USDC) $ 0.999925
BNB (BNB) $ 302.77
XRP (XRP) $ 0.384633
Binance USD (BUSD) $ 1.00
Cardano (ADA) $ 0.461177
Solana (SOL) $ 42.21
Dogecoin (DOGE) $ 0.081328