Singapore regulators report the theft of data belonging to 1.5 million citizens.