新加坡：金融服务公司 MoneySmart 于周二（11 月 3 日）表示，部分客户的个人数据在一起数据安全事件中被“未经授权的第三方”复制。
SINGAPORE: Financial services company MoneySmart said on Tuesday (Nov 3) that personal data of some of its customers was copied by an "unauthorised third party" in a data security incident.
该公司称，于 10 月 29 日发现该第三方访问了其部分内部 IT 系统，调查确认其在新加坡和香港的部分客户受到影响。
It said that it discovered on Oct 29 that the third party had accessed some of its internal IT systems, and its investigation confirmed that some of its customers in Singapore and Hong Kong were affected.
首席执行官 Vinod Nair 在公司网站发布的声明中表示，公司在发现后不久已阻止未经授权的访问，并采取措施保护其系统安全。
The company stopped the unauthorised access and took steps to secure its systems soon after the discovery, said chief executive officer Vinod Nair in a note on the company's website.
他补充说，MoneySmart 还向相关当局报告了该事件，并聘请独立网络安全和取证专家进一步调查。
MoneySmart also reported the incident to the relevant authorities and engaged independent cybersecurity and forensics experts to investigate further, he added.
“我对所有受影响的人深表歉意。客户将其财务生活的信息托付给我们，我们非常重视这一责任，”他说。
"I am deeply sorry to everyone affected. Customers trust us with information about their financial lives, and we take that responsibility very seriously," he said.
他补充说，MoneySmart 正直接联系受影响的客户，解释哪些数据泄露以及他们可以采取哪些措施保护自己。
MoneySmart is reaching out directly to affected customers to explain what data was compromised and the steps they can take to protect themselves, he added.
“MoneySmart 继续正常运营，我们致力于支持我们的客户……我们正在审查导致此次事件的一切，并做出必要的改变以防止其再次发生。”据《亚洲新闻台》（CNA）看到的发送给客户的电子邮件，MoneySmart 表示，受影响的内部 IT 系统存有客户在比较或申请金融产品时与公司分享的个人数据，如姓名和电子邮件地址。
"MoneySmart continues to operate as normal, and we are committed to supporting our customers ... We are reviewing everything that led to this incident and making the changes needed to prevent it from happening again." In emails sent to customers seen by CNA, MoneySmart said the compromised internal IT systems hold personal data, such as names and email addresses, that customers share with the company when they compare or apply for financial products.
该公司补充说，已提交奖励领取申请的客户，其收货地址以及所领取产品的申请或保单参考编号也可能已被第三方复制。
The company added that those who have submitted reward claims may also have had their shipping address and the application or policy reference number for the claimed product copied by the third party.
公司建议客户采取预防措施，包括检查信用卡账单，并及时向银行报告任何无法识别的交易。
It recommended customers to take precautionary steps, including checking their card statements and reporting any transaction they do not recognise to their bank promptly.
他们还应警惕要求确认个人信息或支付费用的快递或奖励信息，并提防意外来电、电子邮件和短信。
They should also be wary of delivery or reward messages that ask them to confirm their details or pay a fee, and be alert to unexpected calls, emails and messages.
该公司表示，已通知相关监管机构，包括个人数据保护委员会（PDPC）。
The company said that it has informed the relevant regulators, including the Personal Data Protection Commission (PDPC).
《亚洲新闻台》（CNA）联系 MoneySmart 寻求更多信息，包括受影响客户的数量。作为回应，该公司转发了其在网站上发布的同一份声明，并未回答《亚洲新闻台》提交的问题。《亚洲新闻台》也已向个人数据保护委员会寻求置评。
CNA reached out to MoneySmart for more information, including the number of customers affected. In response, the company forwarded the same statement that it had posted on its website, which does not answer the questions CNA submitted. CNA has also sought comment from the PDPC.