Personal data of Dementia Singapore’s app users potentially exposed; unauthorised notifications sent
SINGAPORE – The personal information of some members of Dementia Singapore’s digital platform CARA was potentially compromised on Nov 1 following a cybersecurity incident.
In an e-mail sent to users of the app on Nov 11, Dementia Singapore said it became aware of the incident after unauthorised notifications were sent to the platform’s members.
Investigations found that the personal information of some members was potentially exposed during the incident, including names, e-mail addresses, phone numbers and membership IDs.
No NRIC numbers were compromised, said Dementia Singapore.
This is the latest in a string of cybersecurity breaches in the past few weeks affecting a range of organisations, including healthcare service providers, Singapore Airlines, telco M1, SPH Media and food solutions provider SATS.
Dementia Singapore said its third-party mobile app service provider has taken immediate steps to contain the situation and implement measures to secure its systems.
Dementia Singapore also said it is in the process of notifying all CARA members and stakeholders who may be impacted by the incident.
Members of CARA can continue to use the CARA SG app and should update it to the latest version through the Apple App Store or Google Play Store, Dementia Singapore said.
It added: “We are continuing to work closely with our third-party mobile application service provider to investigate further and establish the full extent of the incident.”
The organisation said it has reported the incident to the Personal Data Protection Commission.
CARA is a lifestyle and community digital platform that “provides easy access for persons living with dementia and caregivers to connect to an ecosystem of solutions via a mobile application”, the organisation said on its website.
The app also provides personalised support for those with dementia and caretakers.
In the light of the data breach, Dementia Singapore encouraged members of CARA to remain cautious of unexpected e-mails, calls or messages claiming to be from Dementia Singapore or CARA.
Members should avoid clicking on suspicious links or downloading suspicious attachments, and they should never share passwords or one-time passwords with anyone, it added.
Members should also verify any unusual requests for personal information or payment directly with Dementia Singapore through its official channels, including its helpline on 6377 0700 and e-mail addresses at info@dementia.org.sg and cara@dementia.org.sg
“We apologise for any worry or inconvenience caused and appreciate the trust you place in Dementia Singapore and CARA,” the organisation’s chief executive Bryan Tan said in the e-mail to CARA members.
The Straits Times has contacted Dementia Singapore, the Personal Data Protection Commission, and the Cyber Security Agency for more information.
