text: The branch that you searched for does not have a page in your preferred language. Would you like to visit the branch page on the #CODE# site?
  No
  Yes
  ×
  Call Now 6787 7777
  Contact Us
  About Shred-It
  FAQ
  Services
  Toggle
  One Time Shredding Service
  Boxes and filing cabinets stuffed with old documents? Get our one-off document destruction service.
  Regularly Scheduled Shredding Services
  Protect your business from an information breach with a regularly scheduled paper shredding service.
  Hard Drive Destruction Service
  Ensure sensitive data on old hard drives is 100% inaccessible by physically destroying the drive.
  Media Destruction Service
  Confidential information can be found on more than paper: we destroy CD-ROMs, USB drives, data tapes and more.
  Speciality Shredding Service
  From uniforms to identity cards, speciality shredding destroys information wherever it’s found.
  Pricing
  Resource Centre
  Blog
  Search
  Search for:
  Get a Quote
  Call Now
  Top 5 Singapore Data Breaches in 2016
  Posted February 28, 2017 by Jenny Green
  Confidential Information Risk Management
  Back To Blog
  LinkedIn
  Twitter
  Facebook
  Email
  Print
  Many organisations understand that the private information they hold on their customers is their responsibility and most try to take the necessary precautions to make sure it is adequately protected. Despite their best efforts, cases of data breaches still occur on a regular basis and 2016 was no exception.
  In Singapore, the public’s personal data is protected by the Personal Data Protection Act (PDPA) and enforced by the Personal Data Protection Commission (PDPC). Here's what you can learn from the top 5 data breaches in Singapore last year.
  1) United Overseas Bank (UOB)
  In June 2016, local news site The Middle Ground discovered a black trash bag behind UOB’s headquarters containing both corporate and personal documents from UOB clients, exposing private details such as NRIC numbers, phone numbers, and even a client’s full address. The discovery eventually led the Monetary Authority of Singapore(MAS) to investigate UOB over their failure to adequately protect their clients’ personal data.
  How could this happen? For one, organisations often still focus primarily on cybersecurity as a way to protect private information. Many forget that physical data is equally as important and a secure personal data destruction plan should be implemented to avoid data breaches.
  2) Toh-Shi Printing Singapore
  A third party printing company hired by Aviva insurance, Toh-Shi Printing Singapore, caused the personal data of 8,022 individuals to be leaked when Aviva policyholders received inaccurate statements in which their personal data was disclosed. The PDPC fined the company S$25,000 for failing to implement adequate checks in processing personal data. The printing firm then admitted that the breach occurred due to its own staff failing to comply with the company’s security procedures.
  Cases like this show that sometimes the threat does not come from an external party or malicious intent, but through the carelessness of employees. Clear and easy to follow processes combined with regular reminders and proper staff training can help to mitigate some of this risk.
  3) KBOX
  Popular local karaoke chain KBOX was fined S$50,000 by the PDPC in April 2016 for leaking the names, contact numbers and residential addresses of 317,000 customers as a result of weak passwords and failing to update software. An anonymous individual exploited a computer software flaw and extracted customers’ information from KBOX and uploaded the data on a file sharing website.
  This goes to show the importance of keeping up to date with the latest software patches as well as the importance of regularly reviewing and updating security protocols such as password management. With the right foresight and a little effort, these types of data breaches can be easily avoided with some simple precautions.
  4) PropNex Realty
  The PDPC started probing real estate firm, PropNex Realty, in December 2015 after a woman claimed that her name and mobile number were available online in an unsecured PDF document, which exposed the personal information of 1,765 individuals. Although the document was uploaded with the intent of only being available to staff, the system had a huge security flaw. Even though a password was needed to access webpages hosted by the system, the document itself did not need a password, making it freely available. This security gap resulted in a S$10,000 fine from the PDPC.
  The lesson here is to have clear publishing rules and procedures in place. The more sensitive the information, the higher level of security is required.
  5) JP Pepperdine Group
  The PDPC discovered that the personal data of 30,000 people who joined JP Pepperdine Group’s membership program was accessible by anyone on the company’s website by simply leaving the search field blank and clicking “search” or by entering a randomly simulated membership number on a webpage hosted by its third-party vendor, Ascentis. Exposed data included the names, marital status, NRIC/passport number, date of birth, phone number, email addresses, residential addresses, and other membership account details. The PDPC fined the group $10,000 for failing to adequately protect the data of their members.
  This could have been easily avoided if the company had ensured their webpage was inaccessible to the public from the beginning. Once again highlighting the importance of having the proper publishing protocols in place.
  Don’t let your company become the victim of a data breach. If you would like to review your information security requirements and potential areas of vulnerability, please contact a Shred-it representative for a FREE Data Security Survey.
  Confidential Information Risk Management
  Recent Posts
  How Shred-it is Supporting Paper Recycling in Singapore
  What is a Clean Desk Policy?
  Ensuring Secure Destruction of Patient Records
  Get a Quote
  Call Now 6787 7777
  Home
  Contact Us
  FAQ
  Why Shred
  Paper Shredding and Hard Drive Destruction Pricing
  Change Country
  Australia
  België
  Canada
  Deutschland
  España
  France
  Ireland
  Luxembourg
  Netherlands
  Portugal
  Singapore
  U.A.E.
  United Kingdom
  United States
  bizSAFE accredited
  Shred-it Singapore Pte Ltd is bizSAFE level 3 accredited. The bizSAFE programme promotes workplace safety and health
  ABS Certified
  Shred-it has been certified by the Association of Banks in Singapore (ABS) as an approved outsourced service provider. OSPAR (Outsourced Service Provider’s Audit Report) assesses control and governance, and standardises requirements and auditing processes for firms providing services to the financial industry, confirmed by an annual independent audit.
  NAID Member
  Shred-it Singapore is a NAID Member, adhering to the stringent security practices and procedures established by the National Association for Information Destruction.
  Call Now 6787 7777
  Careers
  Legal
  Service Locations
  Sitemap
  Shred-it is a Stericycle solution. ©2019 Stericycle, Inc. All rights reserved.
  Request a Quote and Start Protecting Your Business Today!
  Fill out the form or call 6787 7777 to start protecting your business today!
  Select Service
  *Select Service One time shredding service
  Shredding service on a regular schedule
  Hard drive destruction
  Other material destruction
  Next
  Company info
  Company
  *ZIP Code
  Next
  Your info
  *First Name
  *Last Name
  *Phone Number
  *Your Email Address
  Privacy Notice
  Next
  Additional Info
  Is there anything we should know before we contact you?
  Title
  By submitting this form, I agree that Shred-it may process and use my data as described in Shred-it's privacy policy.