4 June 2014 - On Monday, 2 June 2014, IDA was notified by the SingPass operator that a number of SingPass users had received a SingPass Password Reset Notification Letter even though they did not request for any password reset.
Singapore, 4 June 2014 | For Immediate Release
On Monday, 2 June 2014, IDA was notified by the SingPass operator that a number of SingPass users had received a SingPass Password Reset Notification Letter even though they did not request for any password reset.
IDA's preliminary investigations revealed that 1,560 users' IDs and passwords had potentially been accessed without the users' permission. An anomaly was detected between the number of mobile numbers used for Immediate Reset One Time Passwords and the number of SingPass accounts that they were tied to. Of these 1,560 users, 419 passwords were also reset triggering the SingPass Password Reset Notification Letters to be sent to the registered address of the actual account holder.
A police report was lodged on 3rd June 2014 and the matter is currently under investigation.
Based on IDA's checks, there is no evidence to suggest that the SingPass system has been compromised.
The passwords of all affected users have been reset and we are in the process of notifying them of this incident.
"For every individual, this incident underlines the importance of taking personal responsibility for cyber security. The Government strongly urges all SingPass users to take the necessary precautions to enhance their cyber security. They should ensure that they use strong passwords to access not only SingPass but all the other e-Services they subscribe to. Strong passwords contain a combination of numerical figures, capital letters and are at least eight characters long. Users should also install anti-virus software and update all their software regularly," said Ms Jacqueline Poh, Managing Director of the Infocomm Development Authority of Singapore.
The Singapore Government takes cyber security very seriously. The protection of personal data and the delivery of secure e-Services are critical. We will continue to strengthen all Government e-Services as part of on-going efforts to enhance security. Users can visit the GoSafe Online website at www.gosafeonline.sg to learn more about how to protect themselves against cyber threats or seek assistance.
ISSUED BY INFOCOMM DEVELOPMENT AUTHORITY OF SINGAPORE
About Infocomm Development Authority of Singapore
The mission of the Infocomm Development Authority of Singapore (IDA) is to develop information technology and telecommunications within Singapore with a view to serve citizens of all ages and companies of all sizes. IDA does this by actively supporting the growth of innovative technology companies and start-ups in Singapore, working with leading global IT companies as well as developing excellent information technology and telecommunications infrastructure, policies and capabilities for Singapore. For more news and information, visit www.ida.gov.sg.
For media clarification, please contact:
Malini NATHAN (Ms)
Manager,
Corporate and Marketing Communication
Infocomm Development Authority of Singapore
DID: (65) 6211 0660
Email: malini_nathan@imda.gov.sg
Angie LOW (Ms)
Senior Manager,
Corporate and Marketing Communication
Infocomm Development Authority of Singapore
DID: (65) 6211 1417
Email: angie_low@imda.gov.sg
.webp)