SINGAPORE, Nov. 10 -- A cyberattack on a school meal-ordering app used by four Singapore schools has exposed students' personal information, including financial assistance status and, in some cases, sensitive health data such as allergies, height and weight.

Food solutions provider SATS confirmed yesterday that its Tappee application had been compromised after an unauthorised external party exploited a security vulnerability in the platform, Singapore-based media organisation CNA reported.

The compromised data included student names, email addresses, concession card numbers and financial assistance statuses, alongside some parents' and guardians' email addresses.

A small number of records also contained students' allergy profiles, heig...