MoneySmart has not disclosed how many customers had data copied in an incident affecting Singapore and Hong Kong, CNA reported, citing the company's account and customer emails.
MoneySmart said it found unauthorized access on Oct. 29. Customer emails reviewed by CNA described names and email addresses supplied when users compared or applied for financial products. For people who filed reward claims, the emails said, copied information may also have included shipping addresses and application or policy reference numbers.
MoneySmart said it stopped the unauthorized access, took steps to secure its systems and hired independent cybersecurity and forensics experts. It also said it notified relevant authorities, including Singapore’s Personal Data Protection Commission (PDPC), and was contacting affected customers. CNA reported that the company said its services were operating normally.
The company urged customers to check card statements and tell their banks about transactions they did not recognize. MoneySmart also advised people to be wary of delivery or reward messages asking them to confirm personal details or pay a fee, as well as unexpected calls, emails and messages.
