Singapore Land Authority Data Breach Exposes Personal Information of 70,000 Individuals A cybersecurity incident involving the Singapore Land Authority (SLA) and its vendor IBM has compromised the personal data of approximately 70,000 individuals. The breach, disclosed on July 3, stemmed from unauthorized access to a development and testing environment managed by IBM for SLA’s Singapore Titles Automated Registration System (STARS) and eLodgment System (ELS) platforms used by lawyers, government agencies, and authorized users for property transactions. The compromised dataset, originally created in 1998 for testing purposes and periodically updated, was intended to contain only mock or anonymized data. However, investigations revealed it included real personal information, such as names, NRIC numbers, and past property addresses. SLA confirmed the data should have been anonymized but was not, though the exact cause remains under investigation. The affected environment was separate from SLA’s operational systems, and the agency assured that live STARS and ELS databases remain secure, with no impact on property ownership or lodgment records. IBM has since revoked access to the compromised system to prevent further unauthorized entry. SLA has begun notifying affected individuals and is coordinating with IBM, the Government Technology Agency of Singapore (GovTech), and the Cyber Security Agency of Singapore (CSA) to investigate the incident and implement remedial measures. A police report has been filed, and the Personal Data Protection Commission (PDPC) has been notified. While details on the timing of the breach and when SLA was alerted remain unclear, the agency has acknowledged the incident and apologized for the inconvenience caused. Investigations are ongoing.