Daily News

View All News

Singapore – Employment agency cyberattack leads to leak of 40,000 jobseekers’ data

25 October 2021

The personal details of approximately 40,000 job applicants in Singapore have been leaked online, following a cyber attack on an employment agency, according to the Business Times and the Straits Times.

Protemps Employment Services, which offers temporary, permanent and contract recruitment services, had its entire server swiped and deleted earlier this month.

The personal details of about 40,000 people who submitted job applications to the company have since been uploaded online. The details include scans of their identity cards or passports, their phone numbers, salaries, jobs and home addresses. Most of the job seekers appeared to be Singaporean.

The hackers, known as Desorden Group, said they were behind the attack on 4 October, boasting about their heist on hacking forums on 7 October. They made a video showing the stolen files and databases, with a message to Protemps, saying they had stolen all the files from the server and had wiped it clean. It also came with a warning for Protemps to "think carefully".

 The video is believed to have been sent to Protemps along with a ransom note. Desorden Group is known to target organisations relating to supply chains.

Protemps has notified the Personal Data Protection Commission and it is investigating the incident. Protemps' website, which was taken offline following the attack, appears to have been partially restored.

Staffing Industry Analysts reached out to Protemps for comment but the company had not yet responded.