SINGAPOREUnknownLow

MCST 4375

bd_021a52b92c8169e1 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 19, 2020

To disclose

—

Affected

Not disclosed

Confidence

90%

Full breach record for MCST 4375 →

Regulator's decision — not a breach notification

This record is a regulator's decision, not the organisation's own breach notice. Breach-notification fields (discovery date, notification clock) are structurally absent — what this source establishes is the outcome and the provisions the decision cites.

Both MCST 4375 and A Best Security Management failed to put in place reasonable security arrangements to prevent the unauthorised disclosure of CCTV footage of an individual injured by a falling glass door at Alexandra Central Mall. MCST 4375 also failed to put in place policies and practices necessary for the organisation to comply with the PDPA. Click here to find out more.

P pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 19, 2020

Filed

—

No linked breach filing · watching

Compliance clocks stay unassessable until a breach filing is linked. This record is the regulator's action, not a breach notice. Dashed segments fill in automatically when corroboration arrives.

Name: MCST 4375
norm: mcst 4375

Name: MCST 4375
norm: mcst 4375

Attack vector: Unknown
Outcome: Violation foundcommission decision
Case number: [2020] SGPDPC 4
National provisions: Protection Obligation (PDPA)Accountability Obligation (PDPA)

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.
Confidence context: Register fields (title, type, date, outcome) are the regulator's own structured publication. Fine and affected count are extracted from the grounds-of-decision PDF where one is published — voluntary undertakings often carry no separate document, and those rows stay register-only.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

outcome + obligations
fine (SGD) and affected count where a grounds document states them
discovery date
notification clock

See the underlying breach notice, if any.

Source URL: https://www.pdpc.gov.sg/organisations/regulations-decisions/enforcement-decisions/breach-of-the-protection-and-accountability-obligations-by-mcst-4375-and-breach-of-the-protection-obligation-by-a-best-security-management
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2020
Raw hash: 454b2d7f7e1f4a7edde6062742b0a27a960846c0da89bdaf78df2d15f30d12bb

Reporting entityMCST 4375

RespondentMCST 4375

What this source establishesUnknown

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.pdpc.gov.sg