Cycle & Carriage Singapore reports data breach exposing data of 147 K clients
Learn More
Cycle & Carriage Singapore (C&C), a Singapore's based automotive company, is reporting a data breach that compromised approximately 147,000 customer data records through unauthorized access to its customer relationship management system.
The incident was discovered on July 14, 2025. C&C has initiated an investigation with external forensic investigators to determine the possible causes of the cyberattack. The exposed data includes:
- Customer names
- Email addresses
- Phone numbers
- Mailing addresses
- Identity card numbers (approximately 2% of records)
- Deposit amounts (approximately 2% of records)
C&C claims that most of the downloaded records are missing some of the information and that banking information and credit card details were not compromised. The nature of the attack is not disclosed.
C&C began notifying customers on July 30, 2025.
The Singapore Personal Data Protection Commission (PDPC) has been notified and has launched an investigation.targeting the affected individuals. The Personal Data Protection Commission's investigation will likely examine C&C's data protection practices, security controls, and compliance with Singapore's data protection requirements.
