PDPC warns AXA Insurance, NTUC over data breaches

Policyholders' personal data were sent over emails to unintended recipients.

The Personal Data Protection Commission (PDPC) has warned AXA Insurance and NTUC Income of separate breaches involving the personal data of policyholders.

Acting on a July 2019 complaint, PDPC scolded AXA after a document containing personal data of 87 policyholders was sent as an email attachment to the wrong recipient, the commission stated in a memo

The document included names, National Registration Identity Card (NRIC) numbers, insurance policy numbers, and details of servicing agents.

AXA admitted that it did not have a process that segregates documents intended for internal record purposes from documents for customers. Its customer care specialist also failed to check the attachment before sending out the email.

NTUC was warned after users received automated acknowledgment emails containing attached files of personal data of other individuals. The emails were received by users making enquiries on the insurer’s website.

NTUC attributed the breach to poor quality codes and said that it has since sought to improve checks on coding quality by replacing its manual code review process with tools such as Crucible and SonarQube.


 

Join Singapore Business Review community
Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.