The user profile of 685,000 registered HardwareZone forum users were compromised in a security breach that took place in September last year, and it took Singapore Press Holdings 4 months to discover and react to the hack.
According to SPH Magazines, the hacker managed to access users’ full names, usernames and email addresses.
It found out about the breach on Sunday (18 Feb) after the discovery of a “suspicious posting” and has since made a police report and engaged security consultants to conduct a review of the system.
SPH Magazines said that the database does not contain NRIC numbers, telephone numbers and addresses as these were purged in July 2015, in line with Personal Data Protection Act guidelines.
It has apologised for the data breach:
“SPH Magazines and HWZ sincerely apologise to HWZ users for this breach of security. We remain committed to protecting all personal data shared with us.”
The hacking of HardwareZone forum is Singapore’s largest-ever data breach to date – Uber held the previous record when personal data of 380,000 of its Singapore users’ names, email addresses and handphone numbers were accessed by hackers in 2016.