\n<\/p>\n
SINGAPORE \u2013 An app for ordering school meals suffered a data breach, with personal information such as students\u2019 names, concession card numbers and financial assistance status compromised.<\/p>\n
In a statement on Nov 10, food solutions provider SATS said it identified a cybersecurity incident involving malicious access by an unauthorised external party to the app, called Tappee. It was launched in January 2023.<\/p>\n
The app was developed and is maintained by a third-party technology vendor, Serial Multivision. The Tappee platform is currently implemented across four schools in Singapore, SATS said.<\/p>\n
In a reply to The Straits Times\u2019 queries, SATS declined to disclose the names of the four schools, citing the \u201cprivacy and interests of affected students and families\u201d.<\/p>\n
SATS\u2019 statement did not say how many people were affected, and when it discovered the breach.<\/p>\n
SATS said: \u201cUnauthorised malicious access to this application was through a vulnerability in the Tappee platform which was detected by SATS\u2019 cybersecurity monitoring capabilities.<\/p>\n
\u201cUpon detection of the incident, we immediately instructed Serial to suspend access to the Tappee application.\u201d<\/p>\n
Based on investigations to date, the types of information compromised include student names and e-mail addresses, student financial assistance status, student concession card numbers, as well as e-mail addresses of some parents and guardians, SATS said.<\/p>\n
\u201cA small number of records contain information on height and weight profile, allergy profile and caloric intake data,\u201d SATS added.<\/p>\n
No banking or credit card information, or details or images of student identification documents, have been compromised, as such information was not collected through the Tappee app, SATS said.<\/p>\n
It added that its own IT infrastructure has not been compromised.<\/p>\n
The company said its cybersecurity specialists are working closely with Serial to strengthen its security safeguards, address identified vulnerabilities in the Tappee platform and implement the necessary remediation measures arising from the investigation.<\/p>\n
It said it has notified the Personal Data Protection Commission (PDPC) and will cooperate fully with the relevant authorities as investigations continue.<\/p>\n
In a media reply on Nov 10, the PDPC confirmed it is aware of the incident and is investigating.<\/p>\n
As a precaution, Tappee will remain temporarily unavailable while security reviews and remediation works continue, SATS said. Tappee\u2019s website could not be accessed when The Straits Times checked at about 6.15pm on Nov 10.<\/p>\n
Meal ordering and delivery services will continue without interruption, SATS added.<\/p>\n
It said that meal orders are currently being managed directly through participating schools, and there has been no impact on meal provision to students.<\/p>\n
SATS said that it recognises the concern this incident may cause affected students, parents and schools, and apologised.<\/p>\n
It added that it has contacted the schools involved and are in the process of notifying affected individuals, while providing them with appropriate guidance and support.<\/p>\n
The company said: \u201cSATS is committed to supporting affected schools, students and their families and implementing further cybersecurity enhancements across systems operated by our third-party technology providers.\u201d<\/p>\n
The cybersecurity incident involving Tappee is among the latest in a string of high-profile data breaches in Singapore and abroad. Local organisations affected by data breaches recently include telco M1<\/span><\/a>, telemedicine provider Doctor Anywhere<\/span><\/a> and media company SPH Media<\/span><\/a>.<\/p>\n The Straits Times has contacted the Ministry of Education and the Cyber Security Agency of Singapore for more information.<\/p>\n<\/div>\n SINGAPORE \u2013 An app for ordering school meals suffered a data breach, with personal information such as students\u2019 names, concession card numbers and financial assistance…<\/p>\n","protected":false},"author":1,"featured_media":98700,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[2611],"tags":[],"class_list":["post-98699","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-buzz-headlines","wpcat-2611-id"],"_links":{"self":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/98699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=98699"}],"version-history":[{"count":0,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/98699\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/media\/98700"}],"wp:attachment":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=98699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=98699"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=98699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
\n
Read Full Article At Source <\/a>
\n