Supply chain β›“ Supply Chain

Ei2 Third-Party Breach (April 2021)

πŸ“… 2021-04-01 🏒 I-vic International
Primary Source β†—

Incident Details

Third-party security breach compromises data of Singapore job-matching service. Job-matching institute e2i says the personal details of 30,000 individuals may have been illegally accessed due to a malware breach that targeted an “appointed third-party vendor”, adding that it was notified of the incident three weeks ago on March 12. Personal details of 30,000 individuals in Singapore may have been illegally accessed, following a security breach that targeted a third-party vendor of job-matching organisation, Employment and Employability Institute (e2i). It was notified of the incident three weeks ago on March 12. It added that the relevant authorities had been notified of the breach, including the police, Personal Data Protection Commission (PDPC), and Cyber Security Agency’s Singapore Computer Emergency Response Team. Third-party company: I-vic International.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
I-vic International
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2021-04-01 Breach occurred
  2. 2021-04-06 Publicly disclosed