{"id":777033760,"date":"2025-10-28T08:40:45","date_gmt":"2025-10-28T11:40:45","guid":{"rendered":"https:\/\/focusgn.com\/asia-pacific\/?p=777033760"},"modified":"2026-04-21T17:45:02","modified_gmt":"2026-04-21T20:45:02","slug":"marina-bay-sands-fined-over-major-2023-data-breach","status":"publish","type":"post","link":"https:\/\/focusgn.com\/asia-pacific\/marina-bay-sands-fined-over-major-2023-data-breach","title":{"rendered":"Marina Bay Sands fined over major 2023 data breach"},"content":{"rendered":"\n

Singapore\u2019s data protection watchdog ruled that the casino resort failed to take \u201creasonable security measures\u201d.<\/p>\n\n\n\n\n\n\n\n

Singapore.- The integrated resort Marina Bay Sands<\/strong> (MBS) has been fined SGD 315,000 (US$243,000) by the Personal Data Protection Commission<\/strong> (PDPC) for a 2023 data breach <\/strong>that compromised the personal information of more than 665,000 customers. The incident, discovered in October 2023, involved unauthorised access by unknown actors who extracted names, contact details and other personal identifiers from the customer database. <\/p>\n\n\n\n

The breach affected members of MBS\u2019s LifeStyle rewards programme, and the stolen data was later found for sale on the dark web. The company said its Sands Rewards Club casino data was not impacted.<\/p>\n\n\n\n

According to the PDPC, the breach occurred during a large-scale software migration in March 2023, when a technical identifier was omitted. The error, stemming from a failure to properly configure APIs, left personal data unprotected for six months.<\/p>\n\n\n\n

Investigators found that the migration process had been handled by a single employee without any secondary checks, which the regulator described as a \u201cnegligent contravention\u201d of Singapore\u2019s data protection laws. The fine, one of the largest imposed under Singapore\u2019s updated data protection framework, accounted for the scale of the breach and the sensitivity of the information exposed. The PDPC noted MBS\u2019s voluntary admission of liability and prompt remediation efforts, including the immediate reactivation of security measures once the breach was detected.<\/p>\n\n\n

\n\t\t\tSee also:<\/span><\/p>\n
\n\t\t\t\t\"\"<\/p>\n

\n\t\t\t\t\tSee also:<\/span> Singapore police make arrests for alleged illegal gambling after Meta shares info<\/a>\n\t\t\t\t<\/p>\n<\/p><\/div>\n<\/p><\/div>","protected":false},"excerpt":{"rendered":"

Singapore\u2019s data protection watchdog ruled that the casino resort failed to take \u201creasonable security measures\u201d.<\/p>\n","protected":false},"author":680,"featured_media":12672,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"is_press_release":false,"is_interview":false,"is_opinion":false,"focusai_summary":"Singapore's Personal Data Protection Commission has fined integrated resort Marina Bay Sands SGD 315,000 for a 2023 data breach impacting over 665,000 customers. The incident, attributed to negligent software migration and API misconfiguration, exposed personal identifiers, though core casino loyalty data remained secure. This ruling underscores the critical importance of robust data governance and compliance frameworks within the iGaming and hospitality sectors.","focusai_entities":"Marina Bay Sands, Personal Data Protection Commission","focusai_location":"Singapore","focusai_target_profile":"ceo_executive (0.9), regulator (1.0), compliance_legal (1.0), operator_casino (0.9), product_ux (0.7), tech_data (1.0), marketing_crm (0.8), payments_fraud_aml (0.7), investor_analyst (0.85), supplier_vendor (0.7), journalist_researcher (0.95)","focusai_suggestions":[{"label":"MBS Governance Impact?","query":"What specific enhancements to Marina Bay Sands' internal governance frameworks and technical oversight protocols are being implemented to prevent future data integrity breaches, particularly concerning large-scale software migrations?"},{"label":"Regulatory Precedent?","query":"How does the Personal Data Protection Commission's ruling and fine against Marina Bay Sands establish a new precedent for data protection compliance and accountability within Singapore's integrated resort sector?"}],"footnotes":""},"categories":[439,16333],"tags":[24962,168,169],"class_list":["post-777033760","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-legal-news","category-south-east-asia-news","tag-data-breach","tag-marina-bay-sands","tag-singapore"],"_links":{"self":[{"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/posts\/777033760","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/users\/680"}],"replies":[{"embeddable":true,"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/comments?post=777033760"}],"version-history":[{"count":3,"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/posts\/777033760\/revisions"}],"predecessor-version":[{"id":777033770,"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/posts\/777033760\/revisions\/777033770"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/media\/12672"}],"wp:attachment":[{"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/media?parent=777033760"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/categories?post=777033760"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/focusgn.com\/asia-pacific\/wp-json\/wp\/v2\/tags?post=777033760"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}