665000 MBS members data leak Govt to investigate if there was significant harm MothershipSG News from Singapore Asia and around the world
pSearchppSearchppNewsppPE2023ppNovappCelebritiesppEventsppFoodppTravelsppVideosppAbroadppFirsthandppEnvironmentppBabelfishpp MoreppParliamentppPerspectivesppHistoryppCovid19ppSearchppNewsppPE2023ppBabelfishppNovappCelebritiesppEventsppFoodppTravelsppVideosppAbroadppFirsthandppEnvironmentpp MoreppParliamentppPerspectivesppHistoryppCovid19ppSearchpp BackppTwo affected members have reached out to the Personal Data Protection Commission PDPCpp
Khine Zin Htet
November 22 2023 0427 PM
pp
pp
pp pp ppOn Nov 7 2023 MBS announced a breach of the personal data of 665000 Marina Bay Sands MBS LifeStyle reward members by an unknown third party on Oct 19 and 20 2023 ppFollowing that the government addressed the data breach during a parliamentary sitting held on Nov 22 ppppppMember of Parliament MP Hany Soh asked if the incident was reported to relevant authorities and if so when it was reported She also asked for the reason for the threeweek delay in notifying affected members of the data breach ppMinister for Communications and Information Josephine Teo addressed the question explaining there is a guide under the Personal Data Protection Act for organisations to follow in managing and notifying data breaches ppShe said the guide sets up clear timelines and requirements for organisations to comply with ppMBS discovered the data breach on Oct 20 and accordingly met the timeframe set out in the guide by notifying the Personal Data Protection Commission PDPC on Oct 24 ppOn why notifications are not required to be made immediately Teo explained that there are four things that organisations need to undertake following a data breach pppp pp pp pp ppppppppAs the priority is on containment and assessment Teo said that the PDPC gives the organisations a little bit of time before they make the notification report ppRegarding the MBS data breach she added that PDPC is conducting investigations and will provide its findings to the public in due course ppIt will ascertain whether there was significant harm to affected individuals and correspondingly whether affected individuals were notified in a timely manner she said ppppSoh posed a supplementary question on whether affected members have been given further assistance following the breach ppTeo responded that two affected members have reached out to the PDPC regarding the breach and have asked for PDPC to hold MBS accountable for the breach ppShe noted that PDPC intends to do so ppTeo also said that when MBS notified members of the breach they had clarified the types of personal data that were revealed which included the name contact information country of residence and membership number as well as their tiers ppIt further provided advice to the affected members on how they could safeguard their accounts with MBS as well as other kinds of personal information she said ppppppOn whether organisations that could be in possession of large volumes of data should be given enhancements to their obligations during incidents of data breach Teo highlighted that a higher standard of personal data protection is already required for these organisations ppThis includes organisations that hold large quantities of personal data or data that might be more sensitive such as insurance medical and financial data ppIn such cases organisations are required to implement enhanced data protection practices as stipulated in PDPCs guide to data protection practices for information and communications technology ICT systems ppIn addition the PDPC has issued an advisory guideline on enforcement of data protection provisions that makes clear that failure to put in place adequate safeguards for large volumes of sensitive personal data can be taken as an aggravating factor in calculating the level of penalties to be imposed on an organisation she said pppp ppppTop photo from Unsplashpp
If you like what you read follow us on Facebook Instagram Twitter and Telegram to get the latest updatesppMinisters except for the Prime Minister will also be able to take on international appointments in their private capacities pp
November 22 2023 0942 PM
ppHe was formerly working at MAS and SGX pp
November 22 2023 0901 PM
ppHes backpp
November 22 2023 0847 PM
ppThe gecko appeared injured but very much alivepp
November 22 2023 0812 PM
ppWaffles by 60 Alley Bakes Coffeepp
November 22 2023 0652 PM
ppCOE premium for bigger cars go uppp
November 22 2023 0634 PM
ppHis replacement is Japanese coach Masatada Ishiipp
November 22 2023 0632 PM
ppHave a jolly good time pp
November 22 2023 0600 PM
ppThe government will continue to work with Telegram as well as other online platforms to better protect Singapore users from harmful contentpp
November 22 2023 0549 PM
ppJob vacancies for fresh graduates have also been trending downwards but remained high at 87900 as of June 2023pp
November 22 2023 0545 PM
pp
About
Advertise with us
Contact us
We Are Hiring
Privacy policy
ppCopyright 2020 Mothership All rights reservedp
Khine Zin Htet
November 22 2023 0427 PM
pp
pp
pp pp ppOn Nov 7 2023 MBS announced a breach of the personal data of 665000 Marina Bay Sands MBS LifeStyle reward members by an unknown third party on Oct 19 and 20 2023 ppFollowing that the government addressed the data breach during a parliamentary sitting held on Nov 22 ppppppMember of Parliament MP Hany Soh asked if the incident was reported to relevant authorities and if so when it was reported She also asked for the reason for the threeweek delay in notifying affected members of the data breach ppMinister for Communications and Information Josephine Teo addressed the question explaining there is a guide under the Personal Data Protection Act for organisations to follow in managing and notifying data breaches ppShe said the guide sets up clear timelines and requirements for organisations to comply with ppMBS discovered the data breach on Oct 20 and accordingly met the timeframe set out in the guide by notifying the Personal Data Protection Commission PDPC on Oct 24 ppOn why notifications are not required to be made immediately Teo explained that there are four things that organisations need to undertake following a data breach pppp pp pp pp ppppppppAs the priority is on containment and assessment Teo said that the PDPC gives the organisations a little bit of time before they make the notification report ppRegarding the MBS data breach she added that PDPC is conducting investigations and will provide its findings to the public in due course ppIt will ascertain whether there was significant harm to affected individuals and correspondingly whether affected individuals were notified in a timely manner she said ppppSoh posed a supplementary question on whether affected members have been given further assistance following the breach ppTeo responded that two affected members have reached out to the PDPC regarding the breach and have asked for PDPC to hold MBS accountable for the breach ppShe noted that PDPC intends to do so ppTeo also said that when MBS notified members of the breach they had clarified the types of personal data that were revealed which included the name contact information country of residence and membership number as well as their tiers ppIt further provided advice to the affected members on how they could safeguard their accounts with MBS as well as other kinds of personal information she said ppppppOn whether organisations that could be in possession of large volumes of data should be given enhancements to their obligations during incidents of data breach Teo highlighted that a higher standard of personal data protection is already required for these organisations ppThis includes organisations that hold large quantities of personal data or data that might be more sensitive such as insurance medical and financial data ppIn such cases organisations are required to implement enhanced data protection practices as stipulated in PDPCs guide to data protection practices for information and communications technology ICT systems ppIn addition the PDPC has issued an advisory guideline on enforcement of data protection provisions that makes clear that failure to put in place adequate safeguards for large volumes of sensitive personal data can be taken as an aggravating factor in calculating the level of penalties to be imposed on an organisation she said pppp ppppTop photo from Unsplashpp
If you like what you read follow us on Facebook Instagram Twitter and Telegram to get the latest updatesppMinisters except for the Prime Minister will also be able to take on international appointments in their private capacities pp
November 22 2023 0942 PM
ppHe was formerly working at MAS and SGX pp
November 22 2023 0901 PM
ppHes backpp
November 22 2023 0847 PM
ppThe gecko appeared injured but very much alivepp
November 22 2023 0812 PM
ppWaffles by 60 Alley Bakes Coffeepp
November 22 2023 0652 PM
ppCOE premium for bigger cars go uppp
November 22 2023 0634 PM
ppHis replacement is Japanese coach Masatada Ishiipp
November 22 2023 0632 PM
ppHave a jolly good time pp
November 22 2023 0600 PM
ppThe government will continue to work with Telegram as well as other online platforms to better protect Singapore users from harmful contentpp
November 22 2023 0549 PM
ppJob vacancies for fresh graduates have also been trending downwards but remained high at 87900 as of June 2023pp
November 22 2023 0545 PM
pp
About
Advertise with us
Contact us
We Are Hiring
Privacy policy
ppCopyright 2020 Mothership All rights reservedp
