The Singapore Personal Data Protection Commission has published its reasoning for its fines of S$50,000 and S$10,000 to karaoke company K Box Entertainment Group and its IT vendor Finantech, respectively, after an April 2016 breach, citing poor passwords and unencrypted emails as among the companies' problems, Out-Law.com reports. Additionally, weak enforcement of privacy practices at K Box during the time of the breach fueled employee negligence, the report states. The data of more than 90,000 members were sent sans encryption, and while they did not cause the breach, the action "is a vulnerability and an example of how K Box had not sufficiently protected the members’ personal data," the PDPC said in its reasoning.
Full Story