, Singapore

Singapore's PDPC warns AXA, NTUC over data breaches

Policyholders' personal data were sent over emails to unintended recipients.

The Personal Data Protection Commission (PDPC) has warned AXA Insurance and NTUC Income of separate breaches involving the personal data of policyholders.

Acting on a July 2019 complaint, PDPC scolded AXA after a document containing personal data of 87 policyholders was sent as an email attachment to the wrong recipient, PDPC stated in a memo

The document included names, National Registration Identity Card (NRIC) numbers, insurance policy numbers, and details of servicing agents.

AXA admitted that it did not have a process that segregates documents intended for internal record purposes from documents for customers. Its customer care specialist also failed to check the attachment before sending out the email.

NTUC was warned after users received automated acknowledgment emails containing attached files of personal data of other individuals. The emails were received by users making enquiries on the insurer’s website.

NTUC attributed the breach to poor quality codes and said that it has since sought to improve checks on coding quality by replacing its manual code review process with tools such as Crucible and SonarQube.
 

Join Insurance Asia community
Since you're here...

...there are many ways you can work with us to advertise your company and connect to your customers. Our team can help you dight and create an advertising campaign, in print and digital, on this website and in print magazine.

We can also organize a real life or digital event for you and find thought leader speakers as well as industry leaders, who could be your potential partners, to join the event. We also run some awards programmes which give you an opportunity to be recognized for your achievements during the year and you can join this as a participant or a sponsor.

Let us help you drive your business forward with a good partnership!

Exclusives

Filipino gamers hold promise for FWD
The insurer plans to support other games and aspects of the gaming ecosystem beyond esports.