Oral Reply by Minister for Transport S Iswaran to Parliamentary Question on Cybersecurity of Charging Stations and Wi-Fi Access Points at Public Transport Nodes

Mr Yip Hon Weng asked the Minister for Transport with the growing vulnerability of mobile devices and data being compromised via public charging stations and Wi-Fi access points

a.      whether there have been any recorded attempts to breach such stations and points at our public transport nodes;

b.     what measures are in place to secure these nodes to reduce the risk of compromise for users; and

c.     whether the Ministry will implement public education measures, such as billboards at MRT stations, to remind users to take precautions to protect their devices and data.

Reply by Minister for Transport S Iswaran:

1.     There have been no reported attempts to breach Wi-Fi access points or public charging stations at our public transport nodes.

2.     Wi-Fi access points at transport nodes operate via the Wireless@SGx network, and comply with prevailing standards by Infocomm Media Development Authority (IMDA). Data transmitted via Wireless@SGx is encrypted. Charging stations, which are provided by public transport operators (PTOs), can only transmit power, and not data, to and from devices. Specifically, the USB ports in public transport nodes already have their data transmission pins removed. Only power transmission pins are present in the ports. The PTOs’ staff can pick up signs of physical tampering through regular visual inspection and feedback from commuters. Closed-circuit television cameras can also detect and deter such attempts.

3.     The charging stations are accompanied by signs reminding users to practise good cyber hygiene, such as using their own power plugs and cables. In addition, members of the public are encouraged to refer to the joint advisory by Cyber Security Agency of Singapore (CSA) and Singapore Police Force (SPF) on 18 April 2023 on protecting mobile devices from malicious wireless and wired connections.