Recently, OG published on their website of an alleged data breach
Here is what OG said:
We write to inform you that on 4 January 2022, we were notified of an alleged data breach of a database containing information on OG Basic and Gold members.
Our preliminary investigations indicate that the database, which had been stored and managed by an external third-party membership portal service provider, was indeed compromised. While the extent of the incident is still being investigated, we are informing you now so that you can take appropriate steps expeditiously to protect your online credentials, as we explain further below.
We swiftly reported the matter to the police and other relevant authorities, including the Personal Data Protection Commission and the Cybersecurity Agency of Singapore. We are also working with our service provider as well as cybersecurity consultants and intend to fully investigate the breach, secure the database and take all necessary action to prevent recurrence.
What Data was compromised:
Data that may potentially have been compromised include OG Basic and Gold members’ names, mailing addresses, email addresses, mobile numbers, genders, dates of birth, cryptographically-hashed NRIC data as well as cryptographically-hashed passwords to the member accounts.
The potentially compromised data did NOT include
- any unencrypted NRIC numbers. We have in any event not collected any NRIC data since 2019.
- any financial information, such as credit card numbers. OG has never stored any financial information of our customers.
The data breach was limited and confined to one isolated database on our members. It does NOT affect any past or future purchases made at OG or at our online stores on og.com.sg or Shopee.
