StarHub's Giga investigated over e-SIM security lapse

Telco StarHub is being investigated by the sector's regulator for failing to verify the identity of users requesting to port their Giga e-SIMs to another phone.

- Fatimah Mujibah

The Straits Times understands that for one customer, the lack of verification resulted in hackers taking control of the phone line and gaining access to information including banking SMS OTPs (one-time passwords).

Giga is the no-frills sub-brand of StarHub.

When contacted, the regulator, the Infocomm Media Development Authority (IMDA), said: "StarHub failed to fully implement this measure for the re-issuance of e-SIM to customers through its app. IMDA is investigating."

She added: "For (the) issuance or re-issuance of SIM cards, mobile operators must have robust registration procedures in place for both SIM and e-SIM."