Massive NRIC Leak with Over 500,000 NRIC Searches in 5 Days

More than 500,000 searches were made on the Accounting and Corporate Regulatory Authority’s (Acra) Bizfile portal between December 9 and 13, exploiting a flaw that revealed full NRIC numbers. This incident sparked widespread concern, prompting a ministerial response in Parliament on January 8.

Incident Overview

The new Bizfile portal was launched on December 9, and its free People Search function allowed users to access full NRIC numbers. Concerns surfaced on December 12, and the search function was disabled the following evening.

The surge in searches, far exceeding the typical daily average of 2,000–3,000, came predominantly on December 13 from approximately 28,000 IP addresses, most of which were from Singapore.

Second Minister for Finance Indranee Rajah explained that while the portal’s function to prevent automated bot searches failed, there is no evidence that malicious actors accessed the data.

Security Oversight and Response

Ms. Indranee acknowledged that the Bizfile portal did not track individual queries, making it impossible to determine the exact number of NRIC numbers disclosed. Acra and GovTech have since conducted a review, addressing the malfunctioning security feature.

The People Search function resumed on December 28, with NRIC numbers no longer displayed in search results.

Acra is also exploring additional parameters, such as using Unique Entity Numbers (UENs) in searches, to enhance data protection.

Scope of Data and Mitigation Advice

Ms. Indranee clarified that Acra’s database contains information only on individuals involved in Acra-registered entities, such as companies, partnerships, and non-profits.

She provided steps for individuals concerned about potential misuse of their NRIC numbers:

Avoid using NRIC numbers as passwords for digital accounts and change any such passwords immediately.
Refrain from using NRIC numbers for authentication purposes.
Verify the identity and intent of individuals requesting NRIC details, even if they appear to know the number.

Lessons and Safeguards

The incident highlights vulnerabilities in systems managing sensitive personal data. While Acra has taken corrective measures, Ms. Indranee emphasized the importance of vigilance and better design in future systems to prevent similar breaches.

Comments

Doctor Faces Jail Time For Negligent Aesthetic Treatment Leading To Patient Death

A thirty seven year old medical practitioner named Chan Bingyi is facing a potential prison sentence of between eighteen and twenty four months following his conviction for a negligent act that resulted in the death of a patient. On April 21 2026 the prosecution presented its sentencing arguments before the court highlighting the severity of the lapse in medical judgment that occurred in 2019. The case involves the death of Lau Li Ting a thirty one year old property agent who passed away following an aesthetic treatment. The incident took place on March 8 2019 at the Revival Medical & Aesthetics Centre located in Bras Basah Road. Ms Lau had visited the clinic situated within the Esplanade Xchange shopping mall for aesthetic purposes specifically hoping to address fine lines on her forehead. During the visit Chan intravenously administered ethylenediaminetetraacetic acid or EDTA to the patient. Court documents and expert testimony emphasized that there was no medical necessity...

Man in Zombie like State Escorted to Police by Driver

A viral video circulating on social media starting from March 17 2026 has captured a dramatic series of events involving a private hire vehicle driver and a passenger appearing to be under the influence of an illegal substance. The footage begins in the Toh Guan area where a man dressed in a black hooded sweatshirt is seen exhibiting highly erratic behavior. The individual appears unable to maintain his balance walking with an unsteady and aimless gait that many observers have characterized as being in a zombie like state. As the man attempts to approach a waiting private hire vehicle he is seen stumbling significantly and nearly falling to the ground on two separate occasions. His movements were uncoordinated and he appeared to be struggling to maintain consciousness or control over his physical actions. Despite his visible impairment he eventually managed to board the vehicle. The behavior displayed by the man led to widespread speculation among netizens that he may have been u...

Rare Malayan Tapir Spotted at Lorong Halus

In a rare and exciting wildlife update an endangered Malayan tapir was spotted at Lorong Halus on the morning of March 19 2026. A cyclist who was passing through the area captured video of the majestic animal as it calmly foraged near a grassy patch. Initially thinking it was a wild boar the cyclist was surprised to find it was actually a tapir which he described as larger than expected and very majestic. After a few minutes of being watched the shy animal jumped through a railing and headed back into the Serangoon River forest. Malayan tapirs are actually quite rare in this part of the world and are not native to the local area. Experts believe they swim across from Malaysia using islands as pit stops. This sighting follows another one from February this year at a Defu Lane carpark and several sightings in Punggol back in 2023. There are currently fewer than 2,500 of these animals left in the wild making them an endangered species. If you happen to see one remember to stay calm ...

LAKOPINEWS.COM

Search This Blog