M1 customer data breach
Singapore telco M1 says it found a data breach on 30 October 2026 and has contained it. Customer names, NRIC/FIN numbers and contact details were exposed, and M1 has not said how many people are affected.
Key facts
- OrganisationM1, a Singapore mobile and broadband operator.
- What happenedM1 identified a data breach on 30 October 2026 and disclosed it on 6 November. It says the breach is contained and services ran normally throughout.
- Data affectedCustomer names, NRIC/FIN numbers, dates of birth, mobile numbers, email addresses and residential addresses.
- Not affectedM1 says payment card details, financial or banking information and customer account access were not compromised.
- Cause or entry pointM1 has not said how the attackers got in. It has not given a number of affected customers.
- AuthoritiesM1 says it is working with the relevant authorities and outside specialists. The PDPC told AsiaOne it is aware of the case and is investigating.
Timeline
- 30 Oct 2026M1 identifies the data breach. M1
- 6 Nov 2026M1 discloses the breach and says it is contained. It lists the data types exposed and says payment data is safe. M1 · Mustsharenews
- 6 Nov 2026The PDPC says it is aware of the breach and is investigating. M1 starts emailing affected customers that evening. AsiaOne
Incident record
| Organisation | Date | Sector | Type | Actor | What happened | Sources |
|---|---|---|---|---|---|---|
| ✅ ConfirmedM1 | 6 Nov 2026 | Telecom | Data leak | None | Confirmed. A breach found on 30 Oct exposed customer names, NRIC/FIN numbers, birth dates, mobile numbers, emails and addresses. Contained; payment data not affected. PDPC said on 6 November it is investigating; M1 has not said how many customers were affected. | Mustsharenews · Goody Feed✓ 8 Nov |
What to do
- Read any email or letter from M1 closely, and check it against M1's official website or app before acting on it.
- Treat calls, SMS and emails that quote your NRIC, birth date or address as possible scams. Call the ScamShield Helpline on 1799 if unsure.
- Never share Singpass details, OTPs or banking passwords with a caller, even one who knows your personal details.
- If you lose money to a scam, report it to your bank at once and file a police report online.
FAQ
Was my M1 data leaked?
M1 says it will contact affected customers by email or letter. It has not published a total number of people affected.
What data was exposed in the M1 breach?
Names, NRIC/FIN numbers, dates of birth, mobile numbers, email addresses and residential addresses. M1 says card, banking data and account access were not affected.
Is anyone investigating the M1 breach?
M1 says it is working with the relevant authorities and outside specialists. The PDPC says it is investigating.
Related stories
- Amadeus airline data breach South Korea, Japan, Hong Kong +3 · 4 Nov 2026
- Philippine agencies named in a wave of hack and leak claims Philippines · 7 Nov 2026
- Bank Rakyat website defacement Malaysia · 6 Nov 2026
- Crédit Mutuel Arkéa loses about 100 million euros to fraudulent transfers France · 4 Nov 2026
Checked 8 Nov 2026. Methodology · Data CC BY 4.0