An “unknown third party” accessed the data of approximately 665,000 Marina Bay Sands (MBS) shoppers last month.
MBS’ chief operating officer, Paul Town, disclosed that the breach occurred on 19 and 20 October and specifically impacted the Sands LifeStyle rewards program, according to a news report by Today.
He further clarified that MBS does not believe the membership data of its casino rewards program, Sands Rewards Club, was compromised.
MBS became aware of the incident on 20 October and promptly initiated actions to address it.
The personal data that was accessed includes customers’ names, email addresses, mobile numbers, countries of residence, and their membership numbers and tiers.
Mr. Town emphasised that, based on their investigation, there is no evidence to date suggesting that the unauthorised third party has misused the data to harm customers.
In response to the issue, MBS swiftly launched an investigation, collaborated with a leading external cybersecurity firm, and took steps to enhance their systems and data protection measures.
The integrated resort also reported the incident to relevant authorities in Singapore and other countries affected by the breach and is actively cooperating with them.
Mr. Town recommended best practices for customers, advising them to monitor their accounts for suspicious activity, regularly change their login PINs, and exercise increased vigilance against phishing attempts, particularly avoiding clicking on links that could lead to malicious websites requesting passwords or other personal information.
