MoneySmart CEO Vinod Nair apologises after data breach in Singapore and HK
MoneySmart CEO Issues Apology Following Singapore and Hong Kong Data Breach
Personal data belonging to customers of financial comparison portal MoneySmart in Singapore and Hong Kong was copied by an unauthorised third party, chief executive officer Vinod Nair announced, prompting an apology from company leadership and regulatory investigations across both markets.
MoneySmart discovered the security incident on October 29, when an unauthorised third party gained access to internal IT systems holding personal information shared by consumers comparing or applying for financial products. The platform allows users to evaluate credit cards, personal loans, and travel insurance.
Affected customers began receiving notification emails on November 3. The compromised data includes personal particulars such as names, dates of birth, nationality, and personal identification numbers, alongside contact information like email addresses, mobile numbers, and shipping addresses, The Straits Times reported. Financial profiles, income ranges, life stages, and vehicle or insurance details were also exposed.
Chief executive Vinod Nair addressed the breach in a public statement. I am deeply sorry to everyone affected,
Nair said. Customers trust us with information about their financial lives, and we take that responsibility very seriously.
Regulators Launch Investigations as Affected Users Report Increased Scams
The company stated that it stopped the unauthorised access and secured its systems immediately after discovering the breach. Independent cybersecurity and digital forensics experts have been hired to investigate the incident.
Regulators in Singapore and Hong Kong have been officially notified. These include Singapore’s Personal Data Protection Commission (PDPC) and the Monetary Authority of Singapore (MAS), alongside the Office of the Privacy Commissioner for Personal Data and the Insurance Authority in Hong Kong. The PDPC confirmed it is investigating the case.
The Monetary Authority of Singapore stated that it is following up closely with MoneySmart. The regulator directed the company to ensure that the breach has been effectively contained, that its IT environment has been secured, and to conduct a comprehensive root cause analysis.
Impacted users shared varying experiences following the disclosure. Two readers who spoke to AsiaOne reported that their names, email addresses, and mobile numbers were compromised. One female reader noted an increase in phishing messages and an attempted login to her Trip.com account after previously purchasing travel insurance through MoneySmart.
Operations Continue While Security Controls Are Reviewed
MoneySmart maintained that its core operations continue as normal while it supports affected customers and strengthened access controls. The firm has advised customers to remain vigilant against unexpected calls, emails, and delivery or reward messages asking for details or fees.
Marketing-Interactive noted that the MoneySmart incident coincides with a broader wave of regional data security events. Financial services company MoneySmart confirmed a data security incident affecting some customers in Singapore and Hong Kong, after an unauthorised third party accessed internal IT systems and copied personal data.
MoneySmart has not disclosed the total number of individuals impacted across Singapore and Hong Kong. The company is contacting affected users directly to detail what specific information was involved and outline recommended protective steps.