SINGAPORE – An app for ordering school meals suffered a data breach, with personal information such as students’ names, concession card numbers and financial assistance status compromised.
In a statement on Nov 10, food solutions provider SATS said it identified a cybersecurity incident involving malicious access by an unauthorised external party to the app, called Tappee. It was launched in January 2023.
The app was developed and is maintained by a third-party technology vendor, Serial Multivision. The Tappee platform is currently implemented across four schools in Singapore, SATS said.
In a reply to The Straits Times’ queries, SATS declined to disclose the names of the four schools, citing the “privacy and interests of affected students and families”.
SATS’ statement did not say how many people were affected, and when it discovered the breach.
SATS said: “Unauthorised malicious access to this application was through a vulnerability in the Tappee platform which was detected by SATS’ cybersecurity monitoring capabilities.
“Upon detection of the incident, we immediately instructed Serial to suspend access to the Tappee application.”
Based on investigations to date, the types of information compromised include student names and e-mail addresses, student financial assistance status, student concession card numbers, as well as e-mail addresses of some parents and guardians, SATS said.
Read Full Article At Source
