SINGAPORE: A ransomware attack has compromised the personal information of at least 146 Income Insurance policy holders, as reported by DataPost, the data handling service provider responsible for their documents. The breach, flagged on 26 May 2024, prompted swift action from both Income Insurance and DataPost.
Details of the Attack
DataPost announced that its investigation into the attack is still in the early stages and will require time to complete. The company has been a vital partner for several government agencies and financial institutions.
Personal Data Compromised
- Data Breached: Names, postal addresses, policy numbers, and annual bonuses for 2024.
- Immediate Response: Income Insurance suspended all printing jobs and blocked connections to DataPost.
The insurer said it received notifications about the incident on Sunday, 28 May 2024, and has placed itself on heightened alert for any suspicious activity.
Investigation and Support
The Personal Data Protection Commission (PDPC) has acknowledged the incident and is investigating alongside the Cyber Security Agency, which is offering support to DataPost. A spokesperson for the Cyber Security Agency stated that they are keeping close tabs on the situation.
The Threat Group and Methodology
Reports indicate that a threat group named “direwolf” executed this coordinated attack using various malicious software tools designed to extract data through unauthorised means. This has raised concerns about the attack’s severity and the security measures in place.
DataPost’s Commitment to Security
DataPost handles over 40 million documents per month, maintaining strict compliance with data security protocols as its facilities are audited annually by banks and external auditors. The company is also the accredited service provider for Singapore’s InvoiceNow, a pioneering e-invoicing initiative.
In response to the incident, DataPost assured stakeholders that it would adhere to all regulatory obligations during the investigation, stating, “We take the security of our data very seriously and will continue to take all necessary steps to address this situation.”
As the situation develops, both DataPost and Income Insurance remain committed to keeping affected policy holders informed.