Breaches and incidents
National Cancer Centre Singapore: event invite in CC exposes 467 recipients with a hereditary cancer condition
An 18 Sep invitation for a “Living with HBOC” event was sent with recipients in CC instead of BCC, exposing names and email addresses (some revealing...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- An 18 Sep invitation for a “Living with HBOC” event was sent with recipients in CC instead of BCC, exposing names and email addresses (some revealing workplaces); NCCS put the number at 467 (Mothership).
- Root cause: an “administrative error” in addressing the email.
- No attacker.
- NCCS tried to recall the email after about two and a half hours, asked recipients to delete it, apologised, and reported to the Ministry of Health and PDPC, which is investigating.