Cyber Incident Victim: RedDoorz
Date:
Sep 2020
Location:
Singapore
Summary
A Singapore-based hospitality startup experienced unauthorized access to one of its IT databases, compromising customer data. The company stated that no sensitive financial information, including credit card details or passwords, was confirmed to be affected based on its current assessment. Investigations into the breach were ongoing at the time of reporting, with authorities involved in examining the incident. The firm emphasized its commitment to addressing the situation while maintaining operational continuity for users.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Singapore-based hospitality startup RedDoorz publicly acknowledged a cybersecurity incident on September 26, 2020, involving unauthorized access to one of its IT databases. The breach occurred earlier that week, though the company did not specify the exact date of intrusion or duration of unauthorized access. RedDoorz issued a statement asserting that, based on its preliminary investigation, no sensitive financial information—including customer credit card details or account passwords—had been compromised at that stage. The company did not disclose technical details regarding the attack vector, the specific database affected, or the volume of records potentially accessed. Local authorities were noted to be investigating data breaches involving Singaporean companies during this period, though the article did not explicitly confirm regulatory involvement specific to RedDoorz beyond general context about parallel investigations.
The incident represented a confirmed compromise of corporate infrastructure but lacked immediate evidence of financial data exfiltration according to the organization's initial assessment. RedDoorz provided no details about detection methods, containment procedures, or forensic investigation timelines in its public statement. No customer-facing impacts such as fraudulent transactions or account takeovers were cited in the available report. The company's disclosure emphasized ongoing analysis while maintaining operational continuity for its hospitality services. Public communication focused on assuring users about the apparent containment of financial data exposure without addressing potential non-financial personal information risks. The breach occurred amid heightened scrutiny of Singaporean tech firms following contemporaneous incidents affecting other local businesses.