Daily News

View All News

Singapore – Employment agency that suffered cyberattack says most stolen data is from fake profiles (The Straits Times)

28 October 2021

An employment agency in Singapore that suffered a data breach which saw the details of approximately 40,000 job applicants leaked online said most of the stolen data was from fake profiles, reports The Straits Times. Protemps Employment Services issued a statement acknowledging the incident, but said it never received any ransom demand to recover the data. Protemps' entire server had its data stolen and deleted on 4 October and the stolen data was uploaded online three days later. The hackers claiming the attack called themselves Desorden Group. Dorothy Neo, the managing director of Protemps, told The Straits Times that the actual number of people affected was less than that claimed by the hackers. She said most of the purported details were from fake CV’s sent to the company through spam accounts, and that only 2,500 real applicants were affected. Of these, she said only 300 profiles contained "full details", including education background, salaries, contact numbers and addresses. The data stolen from Protemps had been accessed by approximately 120 entities.

“There was no ransom note sent to our vendor or Protemps to pay any amount to secure the release of data on our website," Neo said. "Protemps is committed to support our customers as we resolve this incident." Investigations into the incident are ongoing, according to the Personal Data Protection Commission.