WhizComms

WhizComms, also known by its alias, is headquartered in Singapore. The organisation provides broadband internet services to customers in the Singapore market. As part of its service provision, WhizComms collects and stores scanned identity documents such as NRICs, work permits, and visa approval papers. These documents are used to verify customer identity before activating broadband connections. The company serves customers in the Singapore market seeking reliable internet connectivity. Its operations are centred on delivering broadband installation and ongoing service support. The handling of personal identification data indicates a focus on regulatory compliance for telecommunications providers. WhizComms maintains customer records that include service details and identification verification. The organisation’s core activity revolves around enabling internet access for its user base. This positions WhizComms within the local telecommunications sector as a service provider.

In April 2023, WhizComms experienced a security incident where an external party breached its web server. The breach compromised the personal data of approximately 24,000 customers. The exposed information consisted mainly of scanned images of identity documents, including NRICs, work permits, and visa approval papers. Contact details, payment information, and broadband installation addresses were not accessed during the incident. The breach was identified through a routine database scan, after which the company blocked further unauthorized access. WhizComms subsequently notified the affected customers about the data exposure. The incident indicates that the organisation stores broadband installation addresses as part of its customer records, even though those details were not compromised in this case. By retaining identification documents for service verification, WhizComms demonstrates a specialised practice in identity validation for telecommunications services. The scope of the breach indicates that the company manages a customer base of at least twenty‑four thousand individuals. The event underscores the importance of safeguarding sensitive personal data held by the organisation.