Your NRIC is exposed.

Every possible valid NRIC and FIN is listed here. The full space is enumerable because the format is public and the check digit follows a known algorithm. Knowing someone's NRIC number tells you nothing that couldn't be guessed — it is an identifier, not a secret. An NRIC number alone must never be used for authentication or authorisation.

Go deeper on Singapore cybersecurity.