Singapore Privacy Office Issues Lax Password Management Fine

The property management company for a Singapore retail mall faces a S$15,000 ($10,853) fine for failing to limit password sharing and other lax data security practices that led to the theft of shoppers’ information, Singapore’s privacy office announced July 6.

An “unknown perpetrator” used valid administrator account credentials to gain unauthorized access to Orchard Turn Developments Pte. Ltd.'s (Orchard) server and used stolen personal information to send phishing emails to 24,913 mall loyalty rewards program subscribers.

Orchard is the property manager of ION Orchard mall. Hong Kong-based Super-e Management Limited (Super-E) managed its loyalty rewards program.

The decision is notable ...