SIMBA Data Breach Exposes IC Numbers of 23,549 Singapore Customers

Personal data of 23,549 SIMBA customers, including identity card numbers, was exposed in a breach the Singapore telco discovered on 24 September, SIMBA said in a statement on 25 September. The Personal Data Protection Commission (PDPC) told Mothership it's aware of the incident and is investigating.

What was exposed

The statement lists five fields:

• names;
• identity card (IC) numbers;
• dates of birth;
• mobile numbers;
• email addresses.

SIMBA's notice says no credit card or bank account information is at risk, and there's no indication any of the data has been maliciously misused. The telco called the incident resolved and said it had reviewed security on its core systems. It said it would email affected customers within a week of the 25 September notice.

SIMBA's notice doesn't say how the breach happened.

A Singapore Police Force advisory of 21 October covers a separate scam, running since March: fake SIMBA top-up sites in Google's sponsored results.