Fore confirms unauthorized access to a platform used for data processing activities, resulting in some customer data being accessed by unauthorized parties.
Upon detecting the unauthorized activity, we took immediate action to stop the access and secure the affected system within 24 hours. The Company conducted security testing, addressed identified vulnerabilities, updated the affected platform to the latest version, and implemented additional security measures.
Preliminary findings indicate that data associated with approximately 80 thousand Singapore-based users may have been affected.
The information affected varies by customer and may include names, email addresses, phone numbers, dates of birth, gender, hashed PINs, and purchase history through the app.
The Fore app never requests nor stores National Registration Identity Card (NRIC). Furthermore, we do not store payment information, such as credit or debit card details, which is instead held on a separate platform; therefore, such data remains unaffected.
Fore is directly contacting affected customers. Customers who have received a notification are advised to change their Fore PIN and any other account PINs that use the same combination. The Fore app has also implemented two-factor authentication (2FA) for account logins from new devices, serving as an additional security layer to protect customer’s account. So far, there is no indication that the accessed information has been misused.
Customers should also remain vigilant against suspicious communications and never share their PINs or one-time passwords (OTPs).
Fore sincerely apologizes for the concern caused by this incident. Protecting customer data is our responsibility, and we remain committed to supporting affected customers, completing the investigation, and strengthening our security measures.
For further information or assistance, please contact privacy@fore.coffee.
