[SINGAPORE] The personal information of a number of customers of automotive distributor Cycle & Carriage Singapore (C&C) has been leaked in a data breach.
The company began informing affected individuals from Wednesday (Jul 30) that an unknown threat actor had gained access to its customer relationship management system on Jul 14.
In total, 147,000 data records were stolen. Most of these had missing or partial information, said C&C, which may have included names, e-mail addresses, mailing addresses or phone numbers.
Of the breached records, 2 per cent contained National Registration Identity Card numbers and car purchase deposit amounts.
However, banking and credit card information were not contained in the data that was accessed. C&C did not elaborate on how many individuals were affected.
The company is conducting an investigation involving forensic experts and has lodged a police report. It has also alerted the Personal Data Protection Commission, as well as the customers whose details may have been compromised.
BT in your inbox
Start and end each day with the latest news stories and analyses delivered straight to your inbox.
“Our organisation has internal processes, protocols, and training in place to support data governance and cyber hygiene, but we will continue to review and refine these as needed, in light of the incident,” said C&C.
“We apologise to all customers affected by this incident. Protecting customer information is important to us, and measures have been put in place to strengthen our cybersecurity protocols,” it added.
It also urged its customers to remain vigilant of phishing or suspicious requests.
In Singapore, C&C is the agent for a number of automotive brands, including Mercedes-Benz, Kia, Citroen, Smart, Gogoro and Maxus.
It is part of Singapore Exchange-listed Jardine Cycle & Carriage, which has a major automotive presence in the region, including Malaysia, Indonesia and Vietnam.
