Supply chain
β Supply Chain
Ei2 Third-Party Breach (April 2021)
Primary Source βIncident Details
Third-party security breach compromises data of Singapore job-matching service. Job-matching institute e2i says the personal details of 30,000 individuals may have been illegally accessed due to a malware breach that targeted an “appointed third-party vendor”, adding that it was notified of the incident three weeks ago on March 12. Personal details of 30,000 individuals in Singapore may have been illegally accessed, following a security breach that targeted a third-party vendor of job-matching organisation, Employment and Employability Institute (e2i). It was notified of the incident three weeks ago on March 12. It added that the relevant authorities had been notified of the breach, including the police, Personal Data Protection Commission (PDPC), and Cyber Security Agency’s Singapore Computer Emergency Response Team. Third-party company: I-vic International.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- I-vic International
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2021-04-01 Breach occurred
- 2021-04-06 Publicly disclosed