SingPass Users Urged to Use Stronger Passwords to Enhance Their Cyber Security

On Monday, 2 June 2014, IDA was notified by the SingPass operator that a number of SingPass users had received a SingPass Password Reset Notification Letter even though they did not request for any password reset.

IDA’s preliminary investigations revealed that 1,560 users’ IDs and passwords had potentially been accessed without the users’ permission. An anomaly was detected between the number of mobile numbers used for Immediate Reset One Time Passwords, and the number of SingPass accounts that they were tied to. Of these 1,560 users, 419 passwords were also reset, triggering the SingPass Password Reset Notification Letters to be sent to the registered address of the actual account holder.

A police report was lodged on 3 June 2014, and the matter is currently under investigation.

Based on IDA’s checks, there is no evidence to suggest that the SingPass system has been compromised.

The passwords of all affected users have been reset and we are in the process of notifying them of this incident.

“For every individual, this incident underlines the importance of taking personal responsibility for cyber security. The Government strongly urges all SingPass users to take the necessary precautions to enhance their cyber security. They should ensure that they use strong passwords to access not only SingPass but all the other e-services they subscribe to. Strong passwords contain a combination of numerical figures and capital letters and are at least eight characters long. Users should also install anti-virus software and update all their software regularly,” said Ms Jacqueline Poh, Managing Director of the Infocomm Development Authority of Singapore.

The Singapore Government takes cyber security very seriously. The protection of personal data and the delivery of secure e-Services are critical. We will continue to strengthen all Government e-Services as part of on-going efforts to enhance security.

ISSUED BY INFOCOMM DEVELOPMENT AUTHORITY OF SINGAPORE

About Infocomm Development Authority of Singapore

The mission of the Infocomm Development Authority of Singapore (IDA) is to develop information technology and telecommunications within Singapore with a view to serving citizens of all ages and companies of all sizes. IDA does this by actively supporting the growth of innovative technology companies and start-ups in Singapore, working with leading global IT companies, and developing excellent information technology and telecommunications infrastructure, policies, and capabilities for Singapore.

For media clarification

Malini NATHAN (Ms)
Manager, Corporate and Marketing Communication
Infocomm Development Authority of Singapore
DID: (65) 6211 0660
Email: malini_nathan@ida.gov.sg

Angie LOW (Ms)
Senior Manager, Corporate and Marketing Communication
Infocomm Development Authority of Singapore
DID: (65) 6211 1417
Email: angie_low@ida.gov.sg