SINGAPORE — More than 23,500 SIMBA customers have been affected by a data breach that exposed sensitive personal information, including identity-card numbers and dates of birth, raising fresh concerns about the security of customer data in Singapore.
SIMBA said 23,549 customers who had registered for its services were affected. The information involved included customers’ names, identity-card numbers, dates of birth, mobile phone numbers and email addresses, according to the telecommunications company and reports by The Straits Times and CNA.
The incident was discovered on September 24, and SIMBA said it had since resolved the breach and taken immediate measures to review its security systems.
What SIMBA Customers Need to Know
SIMBA said credit-card and bank-account information was not at risk in the incident. The company also said it had found no indication so far that the compromised information had been maliciously misused.
However, the exposure of identity and contact information remains significant because such details can potentially be used in attempts at impersonation, phishing or other forms of social engineering.
The affected customers are being progressively notified by email, with SIMBA saying the notification process was expected to be completed within the following week.
Singapore Data Protection Authorities Investigating
The Personal Data Protection Commission (PDPC) is aware of the incident and is investigating, according to a spokesperson quoted by The Straits Times. SIMBA said it is cooperating with the relevant authorities.
SIMBA said it is also reviewing its existing security measures to strengthen protections for its core infrastructure and systems.
The company has nearly 1.5 million active mobile subscribers, alongside about 62,000 fibre broadband subscribers, according to recent company figures reported by The Business Times. The 23,549 affected customers therefore represent only a portion of its wider customer base.
Why the SIMBA Breach Matters
The incident highlights the growing importance of protecting personal information held by telecommunications providers. SIMBA’s own data-protection notice states that the company may collect identification and contact information, including names, NRIC/FIN/passport numbers, dates of birth, telephone numbers and email addresses.
While SIMBA has said there is currently no indication that the compromised information has been maliciously misused, the investigation remains ongoing.
For affected customers, the key question now is not only how the breach occurred, but also whether the exposed information could later be used in fraudulent or deceptive attempts.
As authorities investigate and SIMBA continues notifying customers, the next stage of the incident could reveal more about what happened — and whether the leaked information has actually been accessed or misused.
WWC ONE MEDIA G,A
