How can we help you today?

StarHub Mitigating Data Breach Incident



1
What happened?

During a proactive online surveillance in July 2021, our cybersecurity experts discovered on a third-party data dump website, an illegally uploaded file containing limited types of personal information related to individual customers who had subscribed to StarHub services before 2007. We acted urgently to rectify the situation and promptly engaged a leading cybersecurity firm to conduct a forensic review of the incident. We also notified the relevant authorities of the matter and continue to work closely with them. We can confirm that no customer names, addresses, credit card or bank account information are at risk, and no StarHub information systems or customer database are compromised. At this time, there is no indication that any data in this document has been maliciously misused.


2
When did this happen?

This incident was discovered by our cybersecurity experts in July 2021 while conducting a proactive online surveillance.


3
What is StarHub doing to assist affected customers?

We are in the process of notifying affected customers via email and assisting to safeguard their identity and personal information by offering six months of complimentary credit monitoring service through Credit Bureau Singapore. StarHub encourages the affected customers to sign up for My Credit Monitor service after receiving the email notification, although there is no evidence to-date that customers’ data has been used inappropriately.


4
How secure are StarHub’s system and network now?

As part of our efforts to rectify the situation, we have investigated and verified the integrity of our network infrastructure, that no StarHub information systems nor customer database are compromised.


5
Why was I not informed earlier that my personal data could be at risk?

We deeply regret this incident and the concern it may cause to our customers. Data security and customer privacy are serious matters for StarHub, and we have taken time to investigate the nature of the incident and assess the impact on affected customers.


6
What is StarHub doing to prevent this from happening?

StarHub will continue to take protection measures to ensure our customers’ data is safe with us. We are reviewing current protection measures and controls in order to implement and accelerate long-term security improvements.


7
How many consumer and enterprise customers are affected by this?

Based on investigations to-date, we can confirm that the data file contains identity card numbers, mobile numbers and email addresses belonging to a limited number of individual customers who had subscribed to StarHub services before 2007. No credit card or bank account information is at risk. This incident does not affect any of our enterprise customers.


8
What can I do now to protect my data?

We advise all our customers to avoid using personal information in their passwords, set strong passwords that are long and complex to secure their accounts, and update their passwords regularly.


9
I am a retail customer. How do I know if I have been affected?

We are in the process of notifying affected customers via email. They will receive an email notification from StarHub by 20 August 2021.


10
What is StarHub doing to assist affected customers?

We are in the process of notifying affected customers via email and assisting to safeguard their identity and personal information by offering six months of complimentary credit monitoring service through Credit Bureau Singapore. StarHub encourages the affected customers to sign up for My Credit Monitor service after receiving the email notification, although there is no evidence to-date that customers’ data has been used inappropriately.


11
How does the My Credit Monitor credit monitoring service work?

My Credit Monitor service acts as your third eye to monitor your credit report, looks out for predetermined activities and notifies you through your preferred email or mobile number:

  • If there are enquiries made by any lender for new credit facility
  • When a search has been made on your own credit file
  • Deteriorating account status assigned to any of your credit facilities
  • New and updated status on default records, and litigation proceedings.

12
I am an affected customer; when does the My Credit Monitor service start and end?

The six-month complimentary My Credit Monitor service will start from the day you apply online at https://www.creditbureau.com.sg/creditfiles/index?application=monitor&partner=STARHUB_MCM. The Access Code is provided in our email notification, and it is valid until 5 September 2021.


13
I am an affected customer; how do I sign up for My Credit Monitor service?

Please apply online at https://www.creditbureau.com.sg/creditfiles/index?application=monitor&partner=STARHUB_MCM using your Singpass ID, Password and the Access Code provided in our email notification to you. Please for the step-by-step instructions. The Access Code is valid until 5 September 2021.