MoneySmart confirms data breach affecting customers in SG and HK

Singapore-based personal finance comparison platform MoneySmart has confirmed a data security incident affecting some of its customers in Singapore and Hong Kong, after an unauthorised third party gained access to its internal IT systems.

The financial comparison platform said it discovered the incident on 29 October and has since confirmed that personal data belonging to some customers in both markets was copied by the third party.

MoneySmart did not disclose how many customers were affected or specify the types of personal data involved in its notice. The company said it is contacting affected customers directly with details on what information was compromised and steps they can take to protect themselves.

Don't miss: Marina Bay Sands fined for data breach affecting over 665,000 patrons

Following the discovery, MoneySmart said it stopped the unauthorised access and took steps to secure its systems. It has also reported the incident to the relevant authorities and engaged independent cybersecurity and forensics experts to investigate the breach.

The company said its services continue to operate as normal and that it is reviewing the circumstances that led to the incident, as well as making changes aimed at preventing a recurrence.

In a statement, MoneySmart Group CEO Vinod Nair apologised to those affected, acknowledging the responsibility that comes with handling customers' financial information.

“I am deeply sorry to everyone affected. Customers trust us with information about their financial lives, and we take that responsibility very seriously,” said Nair.

“We are reviewing everything that led to this incident and making the changes needed to prevent it from happening again,” he added.

MARKETING-INTERACTIVE has reached out for more information. 

MoneySmart’s incident comes as other companies in the region have also reported data breaches in recent months. In September this year, Singapore telco SIMBA confirmed a data breach affecting 23,549 customers, exposing information including names, identity card numbers, dates of birth, mobile numbers and email addresses. SIMBA said credit card and bank account information were not compromised, with investigations at the time finding no indication that the exposed data had been maliciously misused.

Meanwhile, Hong Kong Airlines was among three companies that came under scrutiny in Hong Kong in October 2026 after personal data leaks were linked to suspected scam calls targeting more than 1,600 customers. Hong Kong's Office of the Privacy Commissioner for Personal Data launched investigations into incidents involving the airline, electronics retailer Yoho and Broadway Photo Supply, with preliminary findings showing 815 Hong Kong Airlines passengers had received suspected scam calls. Potentially affected information included passengers' names, phone numbers and flight details.

Related articles: 
Shun Hing Group data breach impacts over 920,000 customers     
Nike investigates alleged data breach following leak claims    
Hong Kong privacy watchdog opens probe into Qantas data breach