New Singapore Personal Data Protection Regulator’s Decisions and Undertakings on 10 March 2023 : Clyde & Co

Eatigo International Pte Ltd was found to have breached data protection obligations after a third party complaint revealed personal data of 2.74 million users had been compromised. Sembcorp Marine Ltd self-reported a cyber attack with personal information of 25,925 individuals affected, but was not found to have breached data protection obligations. Putien Restaurant Pte Ltd self-reported a ransomware attack that encrypted the personal data of 350 employees, but there was no admission of a data breach.