2026 Simba (Singapore) — 23,549 customers; names, NRIC, DOB, phones, emails
Data compromised
Per Simba statement: names, identity card numbers, dates of birth, mobile numbers, and email addresses for 23,549 people who registered for Simba services. No credit card or bank account information at risk; company says no information that leaked data has been maliciously misused. Unclear whether mobile, broadband, or both segments. PDPC aware and investigating.
Technical writeup
Verified company disclosure — Simba statement dated September 25, 2026 as reported by The Straits Times (updated Sep 27). Breach discovered September 24; telco says it “swiftly resolved it,” reviewed security measures, is working with authorities, and is emailing affected customers (process expected within about a week). Confirmed fields: names, NRIC/ID numbers, DOB, mobile numbers, emails for 23,549 registrants. Financial data not at risk per company. Straits Times: PDPC spokesperson said the commission is aware and investigating. recordsAffected 23549; companyConfirmed true.
Root cause
Data breach discovered Sep 24, 2026; company says it swiftly resolved the issue (Simba statement via Straits Times)