Incident

Singapore Council for Estate Agencies reports data leak exposing over 3000 people


Learn More

The Council for Estate Agencies (CEA), a statutory board in Singapore, experienced a data breach on January 21, 2025, due to a technical issue in their IT system.

The incident was discovered the following day. The breach occurred because of an email transmission that mistakenly sent the persobal data of 3,320 individuals to 18 unintended recipients.

The sent data was of current and former property agents and previous examination candidates. Exposed data includes:

  • Full names
  • NRIC (National Registration Identity Card) numbers

The incident affects individuals who registered for the March 2024 Real Estate Salesperson examination and the April 2024 Real Estate Agency examination.

CEA has disabled the affected function, investigate the incident, worked with the recepients to delete the data and sent a notification to all affected individuals. The agency claims that all recipients have deleted the email and its contents without forwarding or using the information and that no contact details such as phone numbers or email addresses were exposed during the incident.

 

Singapore Council for Estate Agencies reports data leak exposing over 3000 people