IBM-managed SLA data incident leaves 70,000 individuals exposed

Names and property addresses were found in an anonymised test dataset.

The Singapore Land Authority (SLA) has disclosed that the personal data of about 70,000 individuals was affected in a data security incident involving an IBM-managed cloud environment.

The data was found in a testing dataset that was accessed without authorisation and should have contained only mock and anonymised information, but included names, NRIC numbers, and property addresses.

IBM was appointed to support and maintain SLA’s Singapore Titles Automated Registration System and eLodgment System, and managed the development and testing environment for both systems.

SLA said the affected environment is separate from its operational systems, and that there was no compromise to the live systems used for STARS, ELS, or any other SLA systems.

“Property ownership and lodgment records in STARS and ELS remain secure and unaffected,” it added.

Meanwhile, IBM has revoked access linked to the affected development and testing environment to prevent further unauthorised access.

SLA has begun notifying affected individuals and is working with IBM, GovTech, and the Cyber Security Agency of Singapore to investigate the incident.

The agency has also lodged a police report and notified the Personal Data Protection Commission.

The dataset was created in 1998 and updated periodically over the years for vendor development and testing.

Follow the link for more news on

cybersecurity

The people you want to reach are already in this room.

Every quarter, SBR lands on the desks of the founders, CFOs, and directors running Asia's most consequential companies. Every day, they open our newsletter and read our website. It's a room that took twenty years to build — and it's the one most of our partners are trying to get into.

The good news is that the door is open. We work with companies on thought leadership articles, sponsored content, industry summits across Southeast Asia, regional awards programmes, podcasts, and media placements in print and digital. The shape of the right partnership depends on what you're trying to do, which is why we'd rather start with a conversation than send a rate card.

If you have something this room should know about, tell us. We'll tell you honestly whether we can help, and how.

No rate cards until we understand the brief. It's a better use of everyone's time.

Book a meeting

| Or download the media kit (PDF)

240,000 senior readers quarterly in print Top 1,700 Singapore companies reached

7 markets across Southeast Asia