FWD Singapore warned over data breach

Personal data was leaked through payment advice letters.

The Personal Data Protection Commission (PDPC) has warned FWD Singapore for failing to prevent the unauthorised disclosure of personal data contained in payment advice letters.

In a decision, the insurer was found in breach of Protection Obligation under section 24 of the country’s Personal Data Protection Act 2012.

On 26 July 2019, FWD notified PDPC of a leak of 71 individuals’ personal data through 42 advice letters sent to incorrect recipients between 20 June and 17 July. It stemmed from an attempt to fix a logic error in the system it used to generate the letters.

A second logic error resulted in the extraction of wrong mailing addresses for advice letters in some circumstances. This could have been detected if manual code review and unit testing had been conducted to a reasonable standard, the PDPC said.

Join Singapore Business Review community
Since you're here...

...there are many ways you can work with us to advertise your company and connect to your customers. Our team can help you dight and create an advertising campaign, in print and digital, on this website and in print magazine.

We can also organize a real life or digital event for you and find thought leader speakers as well as industry leaders, who could be your potential partners, to join the event. We also run some awards programmes which give you an opportunity to be recognized for your achievements during the year and you can join this as a participant or a sponsor.

Let us help you drive your business forward with a good partnership!