Singapore: ShopBack and RedDoorz report data breaches

guest · Sep 28, 2020

Singapore's data privacy watchdog investigating customer data breach at ShopBack
September 26, 2020
https://www.straitstimes.com/singap...nvestigating-customer-data-breach-at-shopback

Local authorities are investigating a data breach at home-grown e-commerce cashback platform ShopBack, after the firm made public an incident involving unauthorised access to customers' personal data.

A spokesman at privacy watchdog the Personal Data Protection Commission said it has been notified of the incident. "Investigations are ongoing," he added.
"To date, we have no reason to believe that any of your personal data has been misused, however the possibility still exists," said the firm, apologising for the incident.

ShopBack said that customers' account passwords are encrypted, but suggested that they change them as an "added precautionary measure".
Click to expand...

ShopBack user Cordelia Lee, 24, said she finds it unsettling at the lack of confirmation over what data was breached on the platform.

While she will be changing her account password, the design firm executive said: "I'm actually more concerned about how this happened, and am looking forward to the company sharing future steps in ensuring better securing their customer's data."
Click to expand...

guest · Sep 28, 2020

IT database breach at RedDoorz but no sensitive information compromised, says hospitality start-up
September 26, 2020
https://www.straitstimes.com/singap...o-sensitive-information-compromised-says-firm

Singapore-based hospitality start-up RedDoorz acknowledged on Saturday (Sept 26) that one of its IT databases suffered a breach earlier this week.

But it assured that "for now", no sensitive data pertaining to financial information, such as customer credit cards or passwords, was compromised "to the best of its knowledge", RedDoorz said in a statement.
Said a spokesman for the company: "We are taking all the necessary steps to investigate this further and at the same time we are conducting a thorough review of all our IT systems and protection."

"We will keep everyone posted on our findings," he added.
Click to expand...

guest · Nov 10, 2020

5.8 million RedDoorz user records for sale on hacking forum
November 10, 2020
https://www.bleepingcomputer.com/ne...doorz-user-records-for-sale-on-hacking-forum/

After suffering a data breach in September, a threat actor is selling a RedDoorz database containing 5.8 million user records on a hacker forum.

At the end of September 2020, RedDoorz disclosed that they suffered a data breach after an unauthorized person accessed one of their databases. At the time, though, no RedDoorz financial information or passwords were exposed "to the best of its knowledge."
5.8 million RedDoorz user records sold online
This week a threat actor began selling a database containing 5.8 million user records that were stolen during RedDoorz's data breach.

As part of the sale, the threat actor shared a database sample, including the table structure and records for 587 users.
Click to expand...

For each user records in the database, a RedDoorz member's email, bcrypt hashed passwords, full name, gender, link to profile photo, phone number, secondary phone number, date of birth, and occupation is exposed.
For numerous user records in the samples, BleepingComputer has confirmed that the listed email addresses and phone numbers are correct for the particular user.

While this data breach exposed far more sensitive data than initially stated by RedDoorz, it does not contain any financial information.
Click to expand...

guest · Nov 17, 2021

Data of 5.9m customers of RedDoorz hotel booking site leaked in Spore's largest data breach
November 15, 2021
https://www.straitstimes.com/tech/t...ing-site-leaked-in-spores-largest-data-breach

The personal data of nearly 5.9 million Singaporean and South-east Asian customers of hotel booking site RedDoorz was found to have been leaked, in what the Government has called Singapore's largest data breach.

The Personal Data Protection Commission (PDPC) has fined local firm Commeasure, which operates the website, $74,000.
This is much lower than the combined $1 million fine imposed on SingHealth and Integrated Health Information Systems for the 2018 data breach which affected 1.5 million people.
Click to expand...

The commission said it had considered hardship on the hospitality sector caused by the Covid-19 pandemic.

"In deciding the amount of financial penalty to be imposed, we also considered that the organisation, which operates in the hospitality industry, had been severely impacted by the Covid-19 pandemic," said the PDPC in a judgment issued last Thursday (Nov 11).
"This is the largest data breach that has occurred since the Personal Data Protection Act came into effect."
Click to expand...

Log in or Sign up

Singapore: ShopBack and RedDoorz report data breaches

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Singapore: ShopBack and RedDoorz report data breaches

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches