MyRepublic Mobile discussion thread

[GuiGuZi]

There is no evidence that any personal data has been misused, said MyRepublic chief executive officer Malcolm Rodrigues.

There is also no evidence that any personal data has NOT been misused... knn...

 

[GuiGuZi]

https://myrepublic.net/sg/business/cybersecurity-services/

They should just close down their cybersecurity services department.

 

[jianlee]

There is also no evidence that any personal data has NOT been misused... knn...

And they appear to be trying to lessen their responsibility by highlighting it happen at a "third-party data storage platform".

Really? Seriously?

 

[jianlee]

https://myrepublic.net/sg/business/cybersecurity-services/

They should just close down their cybersecurity services department.

Wow this make the whole thing even more inexcusable.

 

[Pocoyoz]

what should we do now?
their FB kenna whack jialut


Sent from Pocoyo Fan Club

 

[007Mi6]

And they appear to be trying to lessen their responsibility by highlighting it happen at a "third-party data storage platform".

Really? Seriously?

it make sense to outsource it to manage cost

even if done in-house, they might not be able to escape being hack or gaining unauthorised access.

so the next time we want to engage services with a small player, you know why some doesn’t want to work with small players

 

[chivalry]

has anyone made police report for this? not sure if i should.

 

[11.11.]

has anyone made police report for this? not sure if i should.

on what ground? data breached or you got scam calls due to this breached?

 

[Pocoyoz]

Hackers possibly stole personal data of 79,400 MyRepublic customers, including copies of NRICs


As scans of identity documents and mobile numbers might have been stolen, affected customers could be hit by more mobile spam messages or phishing attempts in the coming weeks, said Dr Stas Protassov, technology president of cyber-security firm Acronis.


Cyber crooks could also try to hijack their identities.

“I would expect some impersonation attacks and identity thefts that could lead to a victim’s accounts for services being taken over,” said Dr Protassov.

He added that some crooks might even create new accounts in the victim’s name to conduct fraudulent activities.

“No stolen data goes to waste these days,” he said. “If the immediate threat actors can’t profit from your data, they will sell it to someone who can.”



Sent from Pocoyo Fan Club

 

[Ctrl_Alt_Del]

What can the hacker do with front and back of photo of nric?

 

[Ctrl_Alt_Del]

80k customers at $20/pax revenue, meaning each year they take in only $80x20x12 or about $19.2m, give it a 10% gross profit or about $1.9m. Not enough to hire cybersecurity services

now reputation all gone and going to close down soon.

they cannot even fix their customer name system

it make sense to outsource it to manage cost

even if done in-house, they might not be able to escape being hack or gaining unauthorised access.

so the next time we want to engage services with a small player, you know why some doesn’t want to work with small players

Singtel also outsource to third party storage.

The personal information taken includes about 129,000 customers' NRIC numbers and a combination of names, dates of birth, mobile numbers and addresses, said Singtel.

https://www.channelnewsasia.com/sin...reach-customer-information-stolen-nric-356131

 

[Lex1989]

What can the hacker do with front and back of photo of nric?

They can impersonate for whatever reason. Good luck young lad!

 

[Lex1989]

has anyone made police report for this? not sure if i should.

You should, and probably won't get any response in return.

 

[SibehHL]

What can the hacker do with front and back of photo of nric?

For one, apply for Telco plans with device?? Maximum 5 lines per NRIC.... then run road upon receiving the device without paying monthly subscription, ruining your credit ratings meanwhile.

 

[kottty]

For one, apply for Telco plans with device?? Maximum 5 lines per NRIC.... then run road upon receiving the device without paying monthly subscription, ruining your credit ratings meanwhile.

now days most need take photo of nric to submit one.


Read HWZ Forum Rules!

 

[chivalry]

You should, and probably won't get any response in return.

I’m expecting that. it is to have official record, that’s all.

 

[Lex1989]

I’m expecting that. it is to have official record, that’s all.

You can also CC the mail to imda and varies ministries for record purpose too.

 

[Pocoyoz]

I’m expecting that. it is to have official record, that’s all.

is it useful? should replace IC anot?


Sent from Pocoyo Fan Club

 

[lkneo66]

The extend of damage is far more than what we can perceive or what Myrepublic is trying to downplay. 6 months of credit monitoring is never sufficient. https://www.straitstimes.com/tech/t...yrepublic-customers-including-copies-of-nrics “I would expect some impersonation attacks and identity thefts that could lead to a victim’s accounts for services being taken over,” said Dr Protassov.

He added that some crooks might even create new accounts in the victim’s name to conduct fraudulent activities.

“No stolen data goes to waste these days,” he said. “If the immediate threat actors can’t profit from your data, they will sell it to someone who can.”

Any lawyer here could advise the course of action for the victims?

 

[firesong]

Singtel also outsource to third party storage.

The personal information taken includes about 129,000 customers' NRIC numbers and a combination of names, dates of birth, mobile numbers and addresses, said Singtel.

https://www.channelnewsasia.com/sin...reach-customer-information-stolen-nric-356131

They lost IC numbers, but they didn't lose front+back images of your NRIC. It's not the same thing. Having the image implies they have the physical NRIC on hand (in order to take the photos), so that is taken as a higher level of checking.

With the actual image, a lot of things can happen. They can sign up for the most expensive plans online with it, might even be able to go to a loan shark and make out crazy loans. It's crazy, the range of activities that having your NRIC images can open up for them - not to mention they have your actual data - DOB and address are on the NRIC, credit card info is on file and was likely compromised, your mobile number is also compromised...

Hypothetically, they could probably even call in to terminate your line, or just set up a number porting out to the most expensive plans on other telcos on a 2year contact, for example. That's enough disruption for you. Then navigating all the hassle that comes with having to terminate the contact, to go to the police and to court and all - all could have been avoided if they didn't store the NRIC images on their server! This is something that having the NRIC number alone cannot do - you need the front/back image to do this.