Data of 70,000 People in Singapore Leaked from IBM Managed Cloud

Illustration of the IBM logo. Personal data of about 70,000 people in Singapore was exposed in a cyber security incident involving an IBM-managed cloud environment for Singapore's land registry system. Photo: Pexels

JAKARTA - Personal data of around 70,000 people in Singapore was exposed in a cyber security incident. The problem arose from an IBM-managed cloud environment for Singapore's land system.

As reported by the Anadolu Agency, quoted Sunday, July 5, the Singapore Land Authority or SLA stated that the incident was found in a dataset created for the development and testing needs of vendors. A dataset is a collection of data used for specific purposes, including system trials.

The initial investigation found unauthorized access to the dataset. The cloud environment is managed by IBM for the Singapore Titles Automated Registration System or STARS and eLodgment System.

SLA said the dataset was created in 1998 and updated periodically. It should only contain dummy records and anonymized data.

Anonymous means that personal identity is removed or disguised so that it can no longer be associated with a specific person.

However, the dataset actually contains the original data. The contents include the names, National Registration Identity Card numbers or NRIC, and addresses of around 70,000 people.

"This information should have been anonymized, but it turned out not to be. The investigation is still ongoing to find out how this happened," said the SLA.

The authority emphasized that the affected testing environment was separate from the operational system. SLA stated that there was no connection or compromise to the active system used for STARS, ELS, and other SLA systems.

"There is no connection or compromise to the direct system used for STARS, ELS, or other SLA systems," said SLA.

SLA stated that property ownership records and document submission remained safe and unaffected.

Anadolu reported that SLA began notifying affected people. The investigation was conducted in conjunction with IBM, the Cyber Security Agency of Singapore, and the Government Technology Agency.

SLA has also made a police report. The Personal Data Protection Commission was also notified of the incident.