The Singapore MLCB (The Moneylenders Credit Bureau) serves as a central data repository for borrowers’ loan and repayment histories with licensed money lenders in Singapore. It serves as one of the main references for legal lenders to approve a loan. The credit report from MLCB allows licensed lenders to assess a borrower’s creditworthiness and prevent excessive borrowing. CREDIT Bureau (Singapore) Pte Ltd (CBS), a subsidiary of mainboard-listed Credit Bureau Asia (CBA) and the offical Credit Bureau of Singapore, is the operator of MLCB system.
GhostR has stolen 54.6GB and a list of 324,362 MLCB reports of individuals in Singapore on 14th June 2024. Each MLCB report contains the following information:
1) Borrower’s personal information, which includes the name, ID number, or Unique Entity Number (UEN),
2) Loan information such as the loan type, tenure, principal loan amount, and total amount payable to the legal money lender
3) Payment and repayment status, which includes the list of all the outstanding loans and the repayment history of each loan
4) Loan guarantor’s status or surety this can reflect guarantor/surety’s legal responsibility for any unpaid loans
GhostR has informed MLCB and CREDIT Bureau (Singapore) Pte Ltd since 28th June regarding this data breach. However, both MLCB and CBS management ignored our requests to negotiate the safety of these sensitive data. Today, we will leak the first 10,000 MLCB reports publicly
Updates: on 25th July 2024, Singapore's Ministry of Law has released a statement confirming the data breach of Singapore Credit Bureau and 12 other licensed moneylender companies. However, their reported affected individuals at 128,000 is not accurate. Likely because the affected companies reported less than what was stolen. We will release more details soon. Link: https://www.mlaw.gov.sg/statement-by-min...d-by-lmls/
News Link: https://www.channelnewsasia.com/singapor...ck-4503606
Sample: https://gofile.io/d/r80e1c
We will be posting more threads regarding this specific data breach and the subsequent companies which are involved in this data breach, a lot of interesting stuff coming up, so stay tuned to our threads
GhostR has stolen 54.6GB and a list of 324,362 MLCB reports of individuals in Singapore on 14th June 2024. Each MLCB report contains the following information:
1) Borrower’s personal information, which includes the name, ID number, or Unique Entity Number (UEN),
2) Loan information such as the loan type, tenure, principal loan amount, and total amount payable to the legal money lender
3) Payment and repayment status, which includes the list of all the outstanding loans and the repayment history of each loan
4) Loan guarantor’s status or surety this can reflect guarantor/surety’s legal responsibility for any unpaid loans
GhostR has informed MLCB and CREDIT Bureau (Singapore) Pte Ltd since 28th June regarding this data breach. However, both MLCB and CBS management ignored our requests to negotiate the safety of these sensitive data. Today, we will leak the first 10,000 MLCB reports publicly
Updates: on 25th July 2024, Singapore's Ministry of Law has released a statement confirming the data breach of Singapore Credit Bureau and 12 other licensed moneylender companies. However, their reported affected individuals at 128,000 is not accurate. Likely because the affected companies reported less than what was stolen. We will release more details soon. Link: https://www.mlaw.gov.sg/statement-by-min...d-by-lmls/
News Link: https://www.channelnewsasia.com/singapor...ck-4503606
Sample: https://gofile.io/d/r80e1c
We will be posting more threads regarding this specific data breach and the subsequent companies which are involved in this data breach, a lot of interesting stuff coming up, so stay tuned to our threads