Official website links end with .gov.sg
A Singapore Government Agency Website
Secure websites use HTTPS
Media Release: Unauthorised access of court documents in State Courts Integrated Criminal Case Filing and Management System
1. On 1 November 2018, the State Courts were alerted about a possible vulnerability in the Integrated Criminal Case Filing and Management System (ICMS). This is the electronic case management system that is used in the State Courts for the conduct of criminal proceedings. The State Courts immediately investigated the matter and found that 223 e-case files had been accessed by a few accused persons without authorisation. Immediate steps were taken to fix the vulnerability. The e-case files had not been tampered with, and the integrity of ongoing proceedings was not affected.
2. The ICMS Accused Person access portal can only be accessed by accused persons with a valid account through SingPass authentication. Preliminary findings show that the accused persons in question had exploited a loophole in the ICMS system which allowed them to view court documents in other e-case files.
3. The State Courts take a serious view of any unauthorised access of information in our case management systems and have reported the matter to the police. As of 9 November 2018, the State Courts and their system vendor, Ecquaria Technologies Pte Ltd, have implemented additional measures to protect the security and confidentiality of the information in the ICMS by enhancing the user access controls within the system.
4. Investigations by the police are ongoing. Letters have been sent to all parties affected by the unauthorised access. A dedicated email (query@statecourts.gov.sg) and hotline (64355651) have been set up to address queries.
Issued by: State Courts Singapore
Date: 28 November 2018
For further information or clarification, please contact:
Ms Michelle Chiang
Senior Assistant Director
Communications Directorate
DID: 6435 5179
Email: michelle_chiang@statecourts.gov.sg
About ICMS
The Integrated Criminal Case Filing and Management System (ICMS) was launched in 2013. It is a paperless e-filing and e-workflow case management system for the administration of criminal cases filed in the State Courts. Used by multiple agencies such as the State Courts, Attorney-General’s Chambers, law firms, law enforcement agencies and Singapore Prison Service, it manages the flow of a criminal case from the start of the prosecution process when charges are filed, to the end when a verdict is given and sentence is passed. The development of the ICMS was led by the State Courts in partnership with the then Infocomm Development Authority (GovTech) with Ecquaria Technologies Pte Ltd being the system vendor.
The Accused Person access portal was introduced in 2017 to allow accused persons to access their case information whether they are represented by counsel or acting in-person. Apart from being able to view their case information, accused persons who are acting in person are able to upload documents into their e-case file for the purposes of court proceedings and to file certain applications online. Access to the case documents by accused persons is protected by layers of authentication and authorisations. All users need to be authenticated by SingPass before they can access their e-case files and the level of access given to the users to the documents in the e-case files is controlled and set by the State Courts.
2. The ICMS Accused Person access portal can only be accessed by accused persons with a valid account through SingPass authentication. Preliminary findings show that the accused persons in question had exploited a loophole in the ICMS system which allowed them to view court documents in other e-case files.
3. The State Courts take a serious view of any unauthorised access of information in our case management systems and have reported the matter to the police. As of 9 November 2018, the State Courts and their system vendor, Ecquaria Technologies Pte Ltd, have implemented additional measures to protect the security and confidentiality of the information in the ICMS by enhancing the user access controls within the system.
4. Investigations by the police are ongoing. Letters have been sent to all parties affected by the unauthorised access. A dedicated email (query@statecourts.gov.sg) and hotline (64355651) have been set up to address queries.
Issued by: State Courts Singapore
Date: 28 November 2018
For further information or clarification, please contact:
Ms Michelle Chiang
Senior Assistant Director
Communications Directorate
DID: 6435 5179
Email: michelle_chiang@statecourts.gov.sg
About ICMS
The Integrated Criminal Case Filing and Management System (ICMS) was launched in 2013. It is a paperless e-filing and e-workflow case management system for the administration of criminal cases filed in the State Courts. Used by multiple agencies such as the State Courts, Attorney-General’s Chambers, law firms, law enforcement agencies and Singapore Prison Service, it manages the flow of a criminal case from the start of the prosecution process when charges are filed, to the end when a verdict is given and sentence is passed. The development of the ICMS was led by the State Courts in partnership with the then Infocomm Development Authority (GovTech) with Ecquaria Technologies Pte Ltd being the system vendor.
The Accused Person access portal was introduced in 2017 to allow accused persons to access their case information whether they are represented by counsel or acting in-person. Apart from being able to view their case information, accused persons who are acting in person are able to upload documents into their e-case file for the purposes of court proceedings and to file certain applications online. Access to the case documents by accused persons is protected by layers of authentication and authorisations. All users need to be authenticated by SingPass before they can access their e-case files and the level of access given to the users to the documents in the e-case files is controlled and set by the State Courts.
2021/10/14
Share this page:
