Individuals whose full NRIC numbers were exposed on the Accounting and Corporate Regulatory Authority’s (Acra) database earlier in December face potential cyber-security risks, as organisations frequently rely on NRIC numbers to retrieve personal information.
Posted on 23 December 2024 12:00 pm | 229 views | 1 commentIndividuals whose full NRIC numbers were exposed on the Accounting and Corporate Regulatory Authority’s database earlier in December face potential cyber-security risks, as organisations frequently rely on NRIC numbers to retrieve personal information.
The experts said the risks highlight how an NRIC number in the wrong hands can pose risks to individuals, who need to be vigilant against scams, even as changes in how NRIC numbers are used in the private sector are afoot. Bad actors could potentially cause mischief by cancelling appointments or collecting prescriptions fraudulently, said cyber-security expert David Siah, executive vice-president of South-east Asia-Australia at the Centre of Strategic Cyberspace + International Studies, a London-based think-tank.
The Registry of Marriages, a national database, allows users who have logged in via national authentication tool Singpass to look up to whom an individual is married. Users are limited to two free searches a year. For other requests, banks typically require callers to identify themselves by entering their NRIC numbers during the call, followed by a one-time password sent to their phone before services or privileged information are provided.
MDDI told the media on Dec 19 that full NRIC numbers should be used only in situations requiring higher authenticity checks, such as during hotel check-ins, medical appointments and subscribing to a new phone line. They should not be used to sign up for retail memberships or lucky draws, among other scenarios.
Singapore Latest News, Singapore Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Singapore to Stop Masking NRIC Numbers, Citing Security RisksFollowing the accidental disclosure of NRIC numbers on a business portal, Singaporean authorities are accelerating public education on proper NRIC use. The government announced it will no longer mask NRIC numbers, emphasizing their role as unique identifiers rather than authenticators. This move aims to protect individuals from vulnerabilities associated with using full NRIC numbers for authentication purposes.
Read more »
Singapore to Charge for Full NRIC Access on Bizfile PortalSingapore will resume providing basic information on individuals registered with the Accounting and Corporate Regulatory Authority (Acra) on its Bizfile portal starting December 23rd. However, users will need to pay $33 to access full NRIC numbers. This change follows public outcry over Acra's previous decision to make NRIC numbers freely searchable, which was subsequently reversed. Acra maintains that the People Search function, while restored, is necessary for business needs and that charging for full NRIC access balances corporate transparency with privacy concerns.
Read more »
How Facebook post led to Government bombshell: Your NRIC number is not secretYour National Registration Identity Card (NRIC) number is not a secret, said the Personal Data Protection Commission (PDPC) on Dec 14. This comes after the Accounting and Corporate Regulatory Authority (Acra) said that its new Bizfile online portal provides full NRIC rather than the masked NRIC as part of the search results.
Read more »
Singapore Apologizes for Accidental Release of NRIC Numbers OnlineThe Singaporean government apologized for an incident where the Accounting and Corporate Regulatory Authority (ACRA) inadvertently released full NRIC numbers on its Bizfile portal. The government stated that the issue stemmed from a communication breakdown and a desire to strengthen NRIC usage as a unique identifier. They emphasized their commitment to protecting citizens' data and explained that the move to phase out masked NRIC numbers is aimed at enhancing security.
Read more »
NRIC numbers can be used to reveal home address, clinic recordsSINGAPORE - Individuals whose full NRIC numbers were exposed on the Accounting and Corporate Regulatory Authority's (Acra) database earlier in December face potential cyber-security risks, as organisations frequently rely on NRIC numbers to retrieve personal information.
Read more »
Banks and insurers say not using NRIC number for high-risk activities, but reviewing its useSINGAPORE - Local banks and insurers are reviewing their use of NRIC numbers, and existing practices could change, they said in separate statements on Dec 19.
Read more »