“Courts fined $178,000 for massive data leak affecting close to 1 million customers, employees”

Key points

• Courts in Singapore was fined $178,000 over a Sept 2022 ransomware attack.
• The breach affected 946,972 people: 941,513 customers and 5,459 staff or applicants.
• Sensitive data included bank details and creditworthiness of employees, plus customer IDs and contact info.
• Attackers gained access via disaster recovery servers exposed to the internet and weak patches.
• PDPC criticized Courts for failing to conduct security checks and timely updates, citing prior penalties.