What was the root cause of the data exposure in the IBM testing environment?

Question

Accepted Answer

Unauthorised access to a vendor testing dataset caused the data exposure in the IBM-managed environment
The root cause was unauthorised access to a dataset created for vendor development and systems integration testing in a cloud environment managed by IBM. Although the dataset was intended to include only mock and anonymised records, it was later found to contain real personal information for about 70,000 people, including names, NRIC numbers and past property addresses.
The exposed dataset was built for vendor development and integration testing
SLA said the breach originated from unauthorised access to a dataset created for vendor development and systems integration testing. The dataset was used within the IBM-managed testing environment supporting the STARS and eLodgment (ELS) systems.
IBM managed the testing environment used for STARS and ELS
IBM oversees the testing environment for STARS and ELS, which are used to submit property transfer and caveat documents. The unauthorised access occurred within that testing setup rather than the systems used for live operations.
The dataset was meant to be mock and anonymised, but included real data
Preliminary checks indicated the dataset was first created in 1998 and updated periodically, with an intended scope limited to mock and anonymised records. It was later discovered to include real personal information, such as names, NRIC numbers and past property addresses, for around 70,000 individuals.
Access was revoked and investigations were launched after the issue was found
SLA said IBM revoked access to the compromised system to prevent further unauthorised entry. SLA also began notifying affected individuals and said it is working with IBM, Singapore’s Government Technology Agency and the Cyber Security Agency of Singapore to investigate and implement remedial steps.

Reading history

Hide →

This history is cleared when the page is closed.

What was the root cause of the data exposure in the IBM testing environment?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends