Financial services firm MoneySmart hit by IT security breach, some customers’ data copied

MoneySmart is reaching out directly to affected customers to explain what data was compromised and the steps they can take to protect themselves, he added.

“MoneySmart continues to operate as normal, and we are committed to supporting our customers … We are reviewing everything that led to this incident and making the changes needed to prevent it from happening again.”

In emails sent to customers seen by CNA, MoneySmart said the compromised internal IT systems hold personal data, such as names and email addresses, that customers share with the company when they compare or apply for financial products.

The company added that those who have submitted reward claims may also have had their shipping address and the application or policy reference number for the claimed product copied by the third party.

It recommended customers to take precautionary steps, including checking their card statements and reporting any transaction they do not recognise to their bank promptly.

They should also be wary of delivery or reward messages that ask them to confirm their details or pay a fee, and be alert to unexpected calls, emails and messages.

The company said that it has informed the relevant regulators, including the Personal Data Protection Commission (PDPC).

CNA reached out to MoneySmart for more information, including the number of customers affected. In response, the company forwarded the same statement that it had posted on its website, which does not answer the questions CNA submitted.

CNA has also sought comment from the PDPC.