MoneySmart says customer data was copied in Singapore and Hong Kong breach

Financial comparison platform MoneySmart disclosed on November 3, 2026 that an unauthorised third party accessed some of its internal IT systems, discovered on October 29, 2026, and copied personal data of some customers in Singapore and Hong Kong. The data potentially accessed varies by customer and includes names, dates of birth, nationality and personal identification numbers, email addresses, mobile numbers and shipping addresses, income ranges, life stages and financial products owned, and vehicle and car insurance inquiry or policy details, plus application or policy reference numbers for reward claimants.

MoneySmart says it stopped the access and secured its systems, engaged independent forensics, notified regulators in both markets (Singapore PDPC and MAS; Hong Kong privacy commissioner and Insurance Authority), emailed affected customers on November 2 and 3, and continues to operate normally. No affected count was disclosed, so this is prepared as a Cybersecurity item, not a Breaches add, following the WorkOS and Chainstack precedent.

Sources: Tabla, reporting The Straits Times; Tech in Asia; Centre for Cybersecurity