NYC data breach exposes 600 SG Youth Forum participants' personal details

The National Youth Council (NYC) acknowledged on Wednesday that personal information belonging to approximately 600 participants of the SG Youth Forum was mistakenly transmitted to a private email address not authorised to receive such data.

The breach involved sensitive identifiers including participants' full names and National Registration Identity Card (NRIC) numbers, which were sent in error during a routine administrative process. The NYC said it discovered the incident and immediately took steps to contain the exposure and notify affected individuals.

The council has since launched an investigation into the circumstances surrounding the leak and pledged to implement additional safeguards to prevent similar incidents. Affected participants are being advised to monitor their personal information and remain alert to any suspicious activity.

The incident comes amid heightened focus on data protection standards across Singapore's public sector. The Personal Data Protection Act (PDPA) requires organisations to implement appropriate security measures to safeguard personal data, with penalties for breaches ranging up to SGD 1 million and potential criminal liability for repeat offenders.

The NYC has committed to enhancing its data handling protocols and staff training on information security best practices, while encouraging participants to report any concerns related to the incident through its official channels.