What led to the compromise of 70,000 Singapore Land Authority personal data records?

Question

Accepted Answer

Compromise of 70,000 SLA Personal Data Records Due to Unauthorized Access in IBM Testing Environment

The compromise of approximately 70,000 personal data records from the Singapore Land Authority (SLA) occurred due to unauthorised access to a dataset within a cloud environment managed by IBM. This dataset was specifically created for vendor development and systems integration testing, separate from SLA's live operational systems. The compromised information included names, NRIC numbers, and past property addresses of affected individuals.
Unauthorized Access to a Dedicated Testing Dataset

The incident stemmed from unauthorised access to a specific dataset that was established for the purpose of vendor development and systems integration testing. This dataset was managed within a cloud environment overseen by IBM, which is responsible for the testing environment for systems like the Singapore Titles Automated Registration System (STARS) and the eLodgment System (ELS).
Dataset Intended for Mock Records Contained Real Information

Initially created in 1998 and updated periodically, this dataset was intended to comprise only mock and anonymised records. However, it was discovered to contain actual personal information, including names, NRIC numbers, and historical property addresses, affecting around 70,000 individuals.
Separation from Live Operational Systems

Crucially, the compromised environment is distinct from SLA's live operational systems. This separation ensures that property ownership and lodgment records within the STARS and eLodgment systems remain secure and were not affected by this specific breach.
Immediate Remedial Actions Taken

Following the discovery, IBM took immediate action to revoke access to the compromised system to prevent any further unauthorised entry. The SLA has also initiated the process of notifying affected individuals and is cooperating with IBM, the Government Technology Agency of Singapore, and the Cyber Security Agency of Singapore to conduct a thorough investigation and implement necessary remedial steps.

Reading history

Hide →

This history is cleared when the page is closed.

What led to the compromise of 70,000 Singapore Land Authority personal data records?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends