Breach of Singapore school meal app TAPP exposes pupil data at four schools
A vulnerability in TAPP, the meal-ordering app operated by SATS, was exploited to leak pupil and guardian information from four schools in Singapore. The data included pupils' names, email addresses, travel card numbers, financial assistance status, and, for some pupils, allergy, height, and weight information. SATS suspended use of the app, and the personal data regulator launched an investigation.
Key facts
- Affected organisation
- SATS
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Pupil and guardian information from four schools in Singapore
- Cause / method
- Unauthorised access by an external party exploiting a vulnerability in the TAPP meal-ordering app
- Location
- Singapore
If your data was exposed
Exposed dataNameEmailHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- It emerged that unauthorised access to TAPP had exposed pupil information from four schools and that SATS had suspended use of the app.
- It was reported that the personal data regulator had launched an investigation into the incident.
11 related reports
- Tappee Data Breach: SATS School Meal App Exposes Student Records at Four Singapore Schools
- School meal app Tappee hit by cyber breach; four schools affected
- Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected
- SATS订餐应用Tappee遭网络入侵；四所学校受影响
- SATS称学校订餐应用Tappee遭网络攻击，四所学校受影响
- Sats: Aplikasi tempahan makanan Tappee diceroboh penggodam, 4 sekolah terjejas
- 学校订餐应用Tappee遭恶意入侵 四所学校学生信息外泄
- School meal ordering app Tappee hit by cybersecurity incident, says SATS; four schools affected
- Tappee Data Breach Exposes Student Details at Four Singapore Schools
- Meal ordering app Tappee hit by data breach; SATS says four schools affected
- Cyberattack on Singapore school meal app exposes children’s personal data across four schools
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.