MyRepublic Mobile discussion thread

[Pocoyoz]

why are they keep scanned copies of NRICs

 

[jianlee]

This is bad! IC so sensitive keep on 3rd party storage?!! Why are they even keeping IC in the 1stplace?!

 

[11.11.]

MyRepublic has how many mobile subscribers? anyone

 

[jianlee]

MyRepublic has how many mobile subscribers? anyone

79,000 ? News said

Personal info including scanned copies of IC, utility bills of over 79,000 MyRepublic mobile customers illegally accessed

The data of over 79,000 MyRepublic Singapore mobile customers has been accessed by an unauthorised third party in a data breach, the telecommunications firm said on Friday (Sept 10).

MyRepublic said the incident took place on Aug 29, and that it occurred on a third-party data storage platform used to store the personal data of its mobile customers.

Based on its investigation, MyRepublic said that the breach affects 79,388 mobile subscribers based in Singapore.

The affected data storage platform contained identity verification documents related to customer applications for mobile services, including:

For affected Singapore citizens, permanent residents and employment and dependent pass holders — scanned copies of both sides of their NRICs
For affected foreigners — proof of residential address documents, such as scanned copies of a utility bill
For affected customers porting an existing mobile service — name and mobile number.

There is no evidence that any personal data has been misused, said MyRepublic chief executive officer Malcolm Rodrigues.

But as a precautionary measure, the company is contacting customers who may be affected to keep them informed and provide them with any support necessary, he added.

 

[Pocoyoz]

if port over plus change of ownership, means both parties are affected?

 

[Jurong640]

if port over plus change of ownership, means both parties are affected?

yes i think so. Double copies. I remember porting over, they require your NRIC scanned.

 

[jianlee]

79,000 customers should seriously consider porting out immediately to protect from further loss of their personal data.

 

[Pocoyoz]

yes i think so. Double copies. I remember porting over, they require your NRIC scanned.

why are they still keep the previous owner data?

 

[jianlee]

my friend ported out last year also received the email. I ported out last week, never receive the email.

This is worrying, so that email is not a sign that you got hack or not.

Are you checking with them to confirm?

 

[stillgottheblues]

Do they use a **** company? This is terrible!

 

[Jurong640]

This is worrying, so that email is not a sign that you got hack or not.

Gotten a mail, saying that my data was breached.

This is sick, they should have shredded customers data months after the customer leaves. I don't think many corporates do not do that, customers profile still remain after 10 years.

Now my worry is, if i never receive email, is it a badder sign??

 

[Pocoyoz]

https://support.myrepublic.com.sg/h...-80186267&mc_cid=7a942bae06&mc_eid=31de3f3c33

Q: How do I know if I’m affected?

A: Based on our investigation, the unauthorised access affects only some of our mobile subscribers based in Singapore. If you are in this group, you should have received an email from us with more information. Please reach out to us here if you did not receive the email, or if you have any additional questions.

 

[Pocoyoz]

This is sick, they should have shredded customers data months after the customer leaves. I don't think many corporates do not do that, customers profile still remain after 10 years.

Now my worry is, if i never receive email, is it a badder sign??

they didnt say if it is encrypted mean it is not

 

[jianlee]

https://support.myrepublic.com.sg/hc/en-us/articles/4406169673881?utm_source=Consumer+September+1&utm_campaign=7a942bae06-EMAIL_CAMPAIGN_2021_09_09_07_15_Cust_Sep(NA)_COPY_&utm_medium=email&utm_term=0_0b6915a89f-7a942bae06-80186267&mc_cid=7a942bae06&mc_eid=31de3f3c33

Q: How do I know if I’m affected?

A: Based on our investigation, the unauthorised access affects only some of our mobile subscribers based in Singapore. If you are in this group, you should have received an email from us with more information. Please reach out to us here if you did not receive the email, or if you have any additional questions.

See lah, they never learn their lesson!

Their 'reach out to us' link sends customers to jotform.com, another don't know who 3rd party.

And this jotform asking for more personal info.

 

[hfngshnll]

See lah, they never learn their lesson!

Their 'reach out to us' link sends customers to jotform.com, another don't know who 3rd party.

And this jotform asking for more personal info.

i hover the mouse pointer over the word and saw a short url, and did not click.

all these short urls, shortcuts, quick links in sms, whatsapp, emails from every company and even the govt depts are the loopholes that give rise to all the scams everywhere.

the only solution is for all these sms, whatsapp & emails not to send all these rubbish links and shortcuts and to just to ask people to use a search engine to look for the website, then access from there, assuming the browser itself have not already been compromised such that even with a proper search engine, the search results will still lead you to the scammers !

this is the sorry state of affairs in the whole world.

 

[Lex1989]

This is sick, they should have shredded customers data months after the customer leaves. I don't think many corporates do not do that, customers profile still remain after 10 years.

Now my worry is, if i never receive email, is it a badder sign??

Yes, you are fked.

 

[Jurong640]

Q: What do I need to do in the meantime?

A: While we currently have no evidence of misuse of the personal data involved in this incident, we are taking steps to notify you of the possibilities. It is important that you remain vigilant for any potential signs of identity fraud. We recommend that you:

Keep an eye on your financial and other accounts for suspicious activity, such as unauthorised transactions and changes to account details, and notify your bank as soon as possible if you notice any such activity;

Check with Singapore Post that your mail has not been redirected if you find you are not receiving mail, and secure your letterbox (fraudsters sometimes redirect or steal mail to avoid detection);

Contact us here if you receive an unsolicited number port request (fraudsters sometimes attempt to port mobile numbers to obtain access to SMS authentication messages)

It is also possible that someone could contact you in an attempt to trick you into providing more personal data or access credentials - this is called “social engineering”. To protect yourself against social engineering, you should:

• Be wary of anyone contacting you who requests personal data or access credentials from you, even if they appear to know other details about you;
• Not respond to email or SMS messages asking for personal data (few legitimate organisations will ask for personal information by email or SMS); and
• Be careful of unsolicited telephone calls which purport to be from a government authority or business (if you think the call is genuine, hang up and call the authority or business back on their public telephone number).

 

[007Mi6]

I port out last year Sep also kenna email Liao.
Let’s see how it goes.

The last time I lost my NRIC, it got used to sign up SH mobile line and ah long came knocking for a good 5 years.

 

[007Mi6]

80k customers at $20/pax revenue, meaning each year they take in only $80x20x12 or about $19.2m, give it a 10% gross profit or about $1.9m. Not enough to hire cybersecurity services

now reputation all gone and going to close down soon.

they cannot even fix their customer name system

 

[camoguysg]

I hope MR gets sued by customers. Now i am worried whether my data was leaked too even though i have not received any email.