A testing database that should have contained only anonymised records instead exposed real names, NRIC numbers and past property addresses
SINGAPORE: The personal data of about 70,000 people has been exposed after attackers gained unauthorised access to a cloud environment managed by IBM for the Singapore Land Authority .
The breach didn’t affect SLA’s live property systems, but investigators found that a testing database dating back to 1998 contained real personal information that should have been anonymised. According to SLA, the exposed records included names, NRIC numbers and former property addresses. SLA announced the incident on July 3, 2026, saying it is notifying affected individuals and working with IBM and government agencies to investigate the incident and tighten security measures.
According to the SLA, IBM manages the development and systems integration testing environment for the Singapore Titles Automated Registration System and the eLodgment System . Initial findings showed that unauthorised access occurred in a development and testing environment, not the operational systems used to process property transactions. The database was created in 1998 and updated over the years for software development and testing. It was meant to contain only mock or anonymised information.
Instead, investigators discovered it also held genuine personal data belonging to an estimated 70,000 people. The authority stressed that the affected testing environment is completely separate from its operational systems. It said there is no evidence that STARS, ELS or any other SLA operational systems were compromised. Property ownership records and land transaction data continue to be secure.
IBM has since revoked access to the affected cloud environment to stop any further unauthorised entry. SLA said it has started contacting everyone whose information appeared in the compromised database and expects to complete notifications by the end of next week. The authority has also lodged a police report and informed the Personal Data Protection Commission. Investigations are being carried out with IBM, the Government Technology Agency of Singapore and the Cyber Security Agency of Singapore.
SLA urged the public to stay alert for phishing emails, text messages, fake websites and phone calls from people pretending to represent government agencies or other organisations. The agency also apologised for the concern caused by the incident. The incident shows how forgotten development databases can become security risks years after they are created. Even when live systems stay protected, older testing environments need the same attention because sensitive information can still find its way into them.
The immediate concern is staying alert for scams that misuse personal details for affected individuals. For organisations, the lesson is equally straightforward: test data should always be anonymised, regularly reviewed and removed when it’s no longer needed. Singapore traffic police officer gets 16 months’ jail for misusing government systems to help a friend threaten his ex‑girlfriend, who reported him for unlicensed...
The suspended traffic police officer accessed government databases to help a friend trace the person who reported him for unlicensed drivingFrom an IG video from @indonesianseleracorner. The proprietor said she intends to keep the price of her nasi lemak low so people on a budget can still enjoy her food, in spite of an alleged S$10,00...document.addEventListener=>{ const trigger=document.getElementById; if { const observer=new IntersectionObserver=>{ entries.forEach { lazyLoader; // You should define lazyLoader elsewhere or inline here observer.unobserve; // Run once } }); }, { rootMargin: '800px', threshold: 0.1 }); observer.observe; } else { // Fallback setTimeout; } });
Please follow us on Google to support usSingapore Latest News, Singapore Headlines
Similar News: You can also read news stories similar to this one that we have collected from other news sources.
Personal data of 70,000 people compromised in SLA-IBM cybersecurity incidentAbout 70,000 people's personal data was compromised in a cybersecurity incident involving the Singapore Land Authority and IBM's cloud environment.
Read more »
Singaporean Driver Fined RM20,000 for Illegal RON95 Fuel Purchase in JohorA Singapore-registered driver has been penalized for illegally purchasing subsidized RON95 fuel in Malaysia, highlighting ongoing enforcement of fuel subsidy regulations.
Read more »
Singaporean Driver Fined RM20,000 for Illegal Use of Subsidized Ron95 Fuel in MalaysiaA Singaporean man was fined RM20,000 for illegally refueling his Singapore-registered car with subsidized Ron95 fuel in Johor, Malaysia. The court upheld new rules that hold drivers personally liable, not just petrol stations. The case highlights efforts to protect fuel subsidies and ensure supply for locals.
Read more »
Top Pave Wins Tender to Develop Serangoon Garden South School Site into Health-Led Lifestyle HubTop Pave, a Singapore-based construction company, has won a five-year lease tender from the Singapore Land Authority for the former Serangoon Garden South School site. The 78,096 sq ft site will be transformed into a health-focused community hub with amenities including fitness, physiotherapy, Traditional Chinese Medicine, and active ageing facilities. The price-quality tender received 13 bids ranging from $12,800 to $62,000 per month, with Fogo Fungi submitting the highest bid.
Read more »