MoneySmart said an unauthorised third party accessed some of its internal IT systems. Its investigation confirmed that personal data belonging to some customers in Hong Kong and Singapore had been copied.
MoneySmart said it discovered the incident on October 29. The Business Times reported that the copied data included names and email addresses.
The company said it ended the unauthorised access, took steps to secure its systems and reported the incident to the relevant authorities. It commissioned experts to investigate further and is contacting affected customers directly to explain what information was involved and what steps they can take.
MoneySmart urged customers to be wary of calls, emails or messages claiming to come from the company, and said it would not ask for passwords or bank-account information by phone or email.