Personal Data Protection Commission (PDPC) Hacking of personal data from servers
When I read a news report that personal data has been stolen from the server of a business organization, I am not alarmed. 

Even if my data is in that server, I ignore the report. 

The data, in most case, comprise of my name, email address and telephone number. Sometimes, it may include the address.

What can the hacker do with that data?

My data is probably among the million of other records that are stolen.

The hacker may sell the email address or mobile number to marketing organizations. 

I ignore marketing messages that I am not interested in. I unsubscribe to the mailing service, if a link is provided.

It could be financially risky if my credit card number is stolen. My bank sends an OTP to my mobile number for confirmation. I find this security to be adequate. 

It may be troublesome if the hacker is able to access my Google or Facebook account. 

This will allow the hacker to change my password and lock me out of the account. 

These social media platforms already implemented a way to recover my account using my mail phone or email address. 

Maybe, they can send unauthorised messages using my account. They cannot do much harm. I expect my contacts, who receive unauthorised  messages from my account, to avoid acting on the messages that may cause them financial loss or distress.

I know that most platforms have implemented adequate measures to protect against the loss of data. They cannot prevent the theft of data totally, especially if it is done by internal staff. 

When it happens, they can do what is necessary to minimise the damage.

I know of many people who are paranoid about the loss of security or privacy. 

I am not concerned.

Tan Kin Lian


 

Add Comment

---