Share on LinkedInShare on LinkedIn

ARTICLE · 24 NOVEMBER 2021

Tuition Agency Fined For Breach Of Personal Data

Global Advertising Lawyers Alliance (GALA)
Explore more from Global Advertising Lawyers Alliance (GALA)

Champion Tutor Inc. is a tuition agency with more than 10 years of experience in matching students with tutors in Singapore through its online marketplace website.

SingaporePrivacy

Champion Tutor Inc. is a tuition agency with more than 10 years of experience in matching students with tutors in Singapore through its online marketplace website. It was fined SGD 10,000 for breach of its personal data protection obligations. This is its second fine in two years over its breach of its personal data protection obligations.

On 24 February 2021, the Personal Data Protection Commission ("the Commission") was informed that personal data information found on Champion Tutor Inc.'s database was sold on the dark web.

The cause of the incident was likely a SQL injection (SQLi) of ChampionTutor's website. ChampionTutor was already aware of this SQL vulnerability when it conducted a penetration test in December 2020, and even though ChampionTutor had instructed its developer in India to fix the vulnerability, the problem was left unfixed until the incident. .

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from