JUST IN: HardwareZone Forum hit by security breach, 685,000 registered user profiles affected, police report lodged
Here is the statement from SPH Magazines, which owns the HardwareZone Forum site, in full: "Arising from a suspicious posting on HardwareZone (HWZ) Forum website on 18 February, an investigation was immediately launched to ascertain whether a security breach on the HardwareZone (HWZ) Forum site occurred. The investigation found that:
- A Senior Moderator’s account had been compromised by an unidentified hacker and used to view approximately 685,000 registered user profiles since September 2017.
- The hacker used the compromised credentials to impersonate the Senior Moderator to retrieve user profile data which comprised name, email address and user ID, and possible optional data fields.
- The HWZ database does not contain NRIC numbers, telephone numbers and addresses as these were purged in line with the Personal Data Protection Commission (PDPC) Guidelines in July 2015.
- As a matter of precaution, forum users were advised to change their forum account password. SPH Magazines, which owns the HWZ site, has also engaged security consultants to conduct a thorough review of the system.
A police report has been lodged and PDPC has been informed. SPH Magazines and HWZ sincerely apologise to HWZ users for this breach of security. We remain committed to protecting all personal data shared with us."