FWD Singapore warned over data breach

Personal data was leaked through payment advice letters.

The Personal Data Protection Commission (PDPC) has warned FWD Singapore for failing to prevent the unauthorised disclosure of personal data contained in payment advice letters.

In a decision, the insurer was found in breach of Protection Obligation under section 24 of the country’s Personal Data Protection Act 2012.

On 26 July 2019, FWD notified PDPC of a leak of 71 individuals’ personal data through 42 advice letters sent to incorrect recipients between 20 June and 17 July. It stemmed from an attempt to fix a logic error in the system it used to generate the letters.

A second logic error resulted in the extraction of wrong mailing addresses for advice letters in some circumstances. This could have been detected if manual code review and unit testing had been conducted to a reasonable standard, the PDPC said.

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.

Book a meeting

| Or download the media kit (PDF)

240,000 senior readers quarterly in print Top 1,700 Singapore companies reached

7 markets across Southeast Asia