PHP Vulnerability Responses by Company

Commeasure Pte. Ltd.

Companies / web services
Aliases / services
RedDoorz / レッドドアーズ / Commeasure Pte. Ltd.
Official website
https://group.reddoorz.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

RedDoorz hotel-booking accounts

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

The PDPC decision dated 15 September 2021 confirms exfiltration of 5,892,843 customer records discovered on 19 September 2020. Records included names, contact details, birth dates, hashed passwords and bookings. An access key embedded in an old Android app was implicated; the app was removed, keys invalidated and customers notified.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Affected users should review their notice and change passwords reused with RedDoorz. Direct current personal-data questions to the official privacy contact. Hashing alone is not treated as proof that a password is safe.

Official service URL

Source URLs

  1. PDPC decision, 15 September 2021https://www.pdpc.gov.sg/-/media/Files/PDPC/PDF-Files/Commissions-Decisions/Decision---Commeasure-Pte-Ltd---15092021.pdfService and operation documentation
  2. Official operator identityhttps://group.reddoorz.com/en/privacy-policyService and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryOperator and scope checked against the document.
  2. PDPC decision, 15 September 2021Official notice; link to this PHP incident unconfirmedOperator and scope checked against the document.
  3. Current privacy contact and operatorOfficial information directoryOperator and scope checked against the document.

Comments