Automotive distributor Cycle & Carriage suffers customer data breach

Business Times

7 days ago

[SINGAPORE] The personal information of a number of customers of automotive distributor Cycle & Carriage Singapore (C&C) has been leaked in a data breach.
Based on an e-mail seen by The Business Times and sent to the company's customers on Thursday (Jul 31), an unknown threat actor gained access to C&C's customer relationship management system on Jul 14.
This actor downloaded some customers' information, which may have included their name, e-mail address, mailing address and phone number.
However, banking and credit card information were not contained in the data that was accessed. The e-mail did not elaborate on how many individuals were affected.
C&C is conducting an investigation and has lodged a police report. It has also alerted the Personal Data Protection Commission, as well as the customers whose data may have been compromised.
It also urged its customers to remain vigilant of phishing or suspicious requests.
BT has contacted C&C for further details, including the number of customers involved and whether the breach is limited to clients in Singapore.
In the city-state, C&C is the agent for a number of automotive brands, including Mercedes-Benz, Kia, Citroen, Smart, Gogoro and Maxus. It is part of Singapore Exchange-listed Jardine Cycle & Carriage, which has a major automotive presence in the region, including Malaysia, Indonesia and Vietnam.