https://pwnsy.com/tools/cyber-watch/singapore/Sourced cyber incidents and official statements, from pwnsy Cyber Watch.enSun, 08 Nov 2026 00:00:00 +0000https://pwnsy.com/tools/cyber-watch/singapore/#all60548354872b791dSat, 07 Nov 2026 00:00:00 +0000A malicious cyber incident leaked user personal data. Police report filed; PDPC is investigating. It learned of the breach on 29 October, engaged Ensign InfoSecurity and says clinical records were not affected. Sources: https://www.asiaone.com/singapore/doctor-anywhere-data-breach, https://sg.news.yahoo.com/doctor-anywhere-hit-data-breach-101642328.htmlhttps://pwnsy.com/tools/cyber-watch/singapore/#all6ae5926c72e52263Sat, 07 Nov 2026 00:00:00 +0000Qilin listed the Singapore engineering firm on its leak site on 7 November. No data volume stated and no press coverage found. Sources: https://www.ransomware.live/id/Qk9TSCBFbmdpbmVlcmluZyBQcml2YXRlIExpbWl0ZWRAcWlsaW4https://pwnsy.com/tools/cyber-watch/singapore/#all0afa6e023b33c92eFri, 06 Nov 2026 00:00:00 +0000A breach found on 30 Oct exposed customer names, NRIC/FIN numbers, birth dates, mobile numbers, emails and addresses. Contained; payment data not affected. PDPC said on 6 November it is investigating; M1 has not said how many customers were affected. Sources: https://mustsharenews.com/m1-data-breach/, https://goodyfeed.com/m1-doctor-anywhere-disclose-separate-data-breaches-customer-numbers-not-revealed/https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-014/4779c126491fca11Fri, 06 Nov 2026 00:00:00 +0000Advisory on attacks against remotely accessible operational technology control systems, citing the European supermarket refrigeration attacks.https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-015/e7caada185012712Fri, 06 Nov 2026 00:00:00 +0000CSA, GovTech and IMDA issue a joint advisory on using personal AI agents safely and securely.https://pwnsy.com/tools/cyber-watch/incidents/m1-data-breach/3b74a99c10b2b669Fri, 06 Nov 2026 00:00:00 +0000M1 says a breach found on 30 Oct 2026 exposed customer names, NRIC/FIN numbers, birth dates, phone numbers, emails and addresses. Payment data was not hit.https://pwnsy.com/tools/cyber-watch/singapore/#all67bb317cddd7c3c9Wed, 04 Nov 2026 00:00:00 +0000About 46,000 booking records held by reservation provider Amadeus were accessed, about 620 with contact, travel document or KrisFlyer details. SIA's own systems were not breached. Sources: https://www.thestar.com.my/business/business-news/2026/11/04/singapore-airlines-says-46000-booking-records-affected-by-amadeus-breachhttps://pwnsy.com/tools/cyber-watch/incidents/amadeus-airline-data-breach/8cc6de331900f74eWed, 04 Nov 2026 00:00:00 +0000Eight airlines in six countries confirmed customer data exposure through Amadeus in 2026, including Malaysia Airlines and Singapore Airlines. Dates, figures and sources.https://pwnsy.com/tools/cyber-watch/singapore/#alld3faacc1bfedaaa7Tue, 03 Nov 2026 00:00:00 +0000An unauthorised party accessed internal systems on 29 Oct and copied personal data of some Singapore and Hong Kong customers. PDPC informed. Sources: https://www.thestar.com.my/aseanplus/aseanplus-news/2026/11/03/moneysmart-data-breach-hits-singapore-hk-users-ic-numbers-financial-info-potentially-exposed, https://hongkongfp.com/2026/11/04/finance-portal-moneysmart-apologises-after-users-sensitive-data-accessed-in-it-system-hack/https://pwnsy.com/tools/cyber-watch/singapore/#all5bba13477a64cc9bTue, 03 Nov 2026 00:00:00 +0000The Orova group listed Raffles United Holdings on its leak site on 2026-11-03. Sources: https://www.ransomware.live/id/UmFmZmxlcyBVbml0ZWQgSG9sZGluZ3MgUHRlIEx0ZEBPcm92YQhttps://pwnsy.com/tools/cyber-watch/singapore/#all550489987e5877a7Tue, 03 Nov 2026 00:00:00 +0000The Orova group listed Detronics on its leak site on 2026-11-03. Sources: https://www.ransomware.live/id/RGV0cm9uaWNzIFB0ZSBMdGRAT3JvdmEhttps://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-157/8193636c2a8985d2Tue, 03 Nov 2026 00:00:00 +0000Alert on active exploitation of PHP2Shell against network and security products including Palo Alto Networks firewalls.https://pwnsy.com/tools/cyber-watch/singapore/#allf552fcc27d5690a2Mon, 02 Nov 2026 00:00:00 +0000The bar and restaurant chain is listed on Orova's leak site. Sources: https://www.ransomware.live/id/SGFycnkncyBJbnRlcm5hdGlvbmFsQE9yb3Zhhttps://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-013/3c49b6ee44fd577cWed, 28 Oct 2026 00:00:00 +0000Advisory on malware campaigns spreading through WhatsApp.https://pwnsy.com/tools/cyber-watch/singapore/#all49e7277f1abaa597Tue, 27 Oct 2026 00:00:00 +0000Everest lists an unnamed Singapore energy storage terminal on its leak site. Sources: https://www.ransomware.live/id/RW5lcmd5IFN0b3JhZ2UgVGVybWluYWwgaW4gU2luZ2Fwb3JlQGV2ZXJlc3Qhttps://pwnsy.com/tools/cyber-watch/singapore/#all43dce90aa847dc0dSat, 24 Oct 2026 00:00:00 +0000Alliance Healthcare Group told SGX that a third party gained unauthorised access to subsidiary Alliance Medinet's membership database, exposing names, ID numbers and contact details of about 110,000 members, and that it reported the incident to the PDPC on 21 October. Sources: https://littlebigreddot.com/alliance-medinet-data-breach-110000-members-october-2026/, https://www.mlex.com/mlex/articles/2542185https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-151/1b83b4c576c39051Wed, 21 Oct 2026 00:00:00 +0000Alert on critical PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619) allowing unauthenticated remote code execution.https://sg.finance.yahoo.com/news/singapore-updates-national-cybersecurity-strategy-224440364.htmlc22ec3a195db0ca2Tue, 13 Oct 2026 00:00:00 +0000Launch of the Singapore Cybersecurity Strategy 2026, including an enhanced national cyber command centre for critical infrastructure.https://www.csa.gov.sg/news-events/press-releases/singapore-launches-cybersecurity-strategy-2026-to-strengthen-national-cyber-resilience/abe330751860bf12Tue, 13 Oct 2026 00:00:00 +0000Senior Minister K Shanmugam launched Singapore's Cybersecurity Strategy 2026 at Singapore International Cyber Week.https://pwnsy.com/tools/cyber-watch/singapore/#allf881b9c2d06d5f46Mon, 12 Oct 2026 00:00:00 +0000The Singapore-based container line is listed on N0n's leak site. Sources: https://www.ransomware.live/id/T2NlYW4gTmV0d29yayBFeHByZXNzIChjb250YWluZXIgc2hpcHBpbmcpQE4wbghttps://pwnsy.com/tools/cyber-watch/singapore/#alld7eb69fc7c0a3c65Mon, 12 Oct 2026 00:00:00 +0000The N0n group listed Apical Group on its leak site on 2026-10-12. Sources: https://www.ransomware.live/id/QXBpY2FsIEdyb3VwIChjb21tb2RpdHkgcHJvY2Vzc2luZyBhbmQgbG9naXN0aWNzKUBOMG4https://pwnsy.com/tools/cyber-watch/singapore/#all2f060806b907d17dThu, 08 Oct 2026 00:00:00 +0000The Eclipse group listed Global AirFreight International on its leak site on 2026-10-08. Sources: https://www.ransomware.live/id/R2xvYmFsIEFpckZyZWlnaHQgSW50ZXJuYXRpb25hbEBFY2xpcHNlhttps://www.bakermckenzie.com/en/insight/publications/2026/10/singapore-parliament-passes-digital-infrastructure-billcc7d52b7de238334Wed, 07 Oct 2026 00:00:00 +0000Parliament passed the Digital Infrastructure Bill, and MAS issued its Guidelines on AI Risk Management.https://pwnsy.com/tools/cyber-watch/singapore/#all879035137634273bWed, 30 Sep 2026 00:00:00 +0000The PDPC said an employee's AI-generated mailing script exposed the email addresses of 95,364 members to other recipients, its first notified AI-related breach, and accepted a voluntary undertaking from the company. Sources: https://mothership.sg/2026/10/bee-cheng-hiang-members-data-breach-ai/, https://www.bloomberg.com/news/articles/2026-09-30/singapore-reports-first-data-breach-linked-to-ai-use-sthttps://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-012/71be5b017e05cda1Wed, 30 Sep 2026 00:00:00 +0000Advisory on the CARBONATO botnet campaign targeting exposed Docker daemons.https://pwnsy.com/tools/cyber-watch/singapore/#all8f907a68bb3e8bfdMon, 28 Sep 2026 00:00:00 +0000Names, ID numbers, birth dates, mobile numbers and emails of 23,549 customers were breached. PDPC is investigating. Sources: https://www.malaymail.com/news/singapore/2026/09/28/data-breach-affects-23549-customers-of-singapore-telco-simba-personal-data-protection-commission-investigating/236820, https://www.thestar.com.my/aseanplus/aseanplus-news/2026/09/28/personal-information-of-over-23500-simba-telco-customers-leaked-in-data-breach-in-singaporehttps://pwnsy.com/tools/cyber-watch/singapore/#allcd1b396e4399e022Sat, 26 Sep 2026 00:00:00 +0000Listed on The Gentlemen's leak site. Sources: https://www.ransomware.live/id/Q2hhcmxlcyBLZWl0aEB0aGVnZW50bGVtZW4https://pwnsy.com/tools/cyber-watch/singapore/#all7e72ef26ad7889daFri, 18 Sep 2026 00:00:00 +0000The Killsec group listed Giti Corp on its leak site on 2026-09-18. Sources: https://www.ransomware.live/id/R2l0aSBDb3JwQGtpbGxzZWMhttps://pwnsy.com/tools/cyber-watch/singapore/#alld99b834d8701dc95Tue, 08 Sep 2026 00:00:00 +0000The Eclipse group listed TTG Asia Media on its leak site on 2026-09-08. Sources: https://www.ransomware.live/id/VFRHIEFzaWEgTWVkaWFARWNsaXBzZQhttps://www.mha.gov.sg/media-room/newsroom/second-reading-of-the-scams-countermeasures-and-other-matters-bill/26610392eed211bcTue, 08 Sep 2026 00:00:00 +0000MHA moved the second reading of the Scams (Countermeasures) and Other Matters Bill, which Parliament passed the next day.https://pwnsy.com/tools/cyber-watch/singapore/#alla95dc1094cd21659Wed, 02 Sep 2026 00:00:00 +0000The hotel is listed on Eclipse's leak site. Sources: https://www.ransomware.live/id/Um95YWwgUGxhemEgT24gU2NvdHRzQEVjbGlwc2Uhttps://www.police.gov.sg/-/media/SPF/Media-Room/Statistics/Mid-Year-Scam-and-Cybercrime-Brief-2026/Mid-Year-Scam-and-Cybercrime-Brief-2026.pdf608486960264473eWed, 26 Aug 2026 00:00:00 +0000SPF reported scam losses of about S$410.6 million in the first half of 2026, down 17.9%.https://www.police.gov.sg/media-hub/news/2026/08/20260818_issuance_of_codes_of_practice_under_the_online_criminal_harms_actb9e8512923ce1080Tue, 18 Aug 2026 00:00:00 +0000SPF announced new OCHA Codes of Practice for messaging, social media and e-commerce services issued on 17 August.https://pwnsy.com/tools/cyber-watch/singapore/#allc9fab4a5b342c57dMon, 10 Aug 2026 00:00:00 +0000The The Gentlemen group listed NTU Alumni Club on its leak site on 2026-08-10. Sources: https://www.ransomware.live/id/TlRVIEFsdW1uaSBDbHViQHRoZWdlbnRsZW1lbghttps://pwnsy.com/tools/cyber-watch/singapore/#all1befda6a217a237dSun, 02 Aug 2026 00:00:00 +0000The Krybit group listed ProHealth (prohealth.sg) on its leak site on 2026-08-02. Sources: https://www.ransomware.live/id/d3d3LnByb2hlYWx0aC5zZ0BrcnliaXQhttps://pwnsy.com/tools/cyber-watch/singapore/#allc6e72acb0e7dd76aMon, 27 Jul 2026 00:00:00 +0000The Nightspire group listed Akribis Systems on its leak site on 2026-07-27. Sources: https://www.ransomware.live/id/QWtyaWJpcyBTeXN0ZW1zIFB0ZSBMdGRAbmlnaHRzcGlyZQhttps://pwnsy.com/tools/cyber-watch/singapore/#all41cf47b8061ee62bFri, 03 Jul 2026 00:00:00 +0000SLA said IBM told it of unauthorised access to an IBM-managed development and testing cloud environment that held names, NRIC numbers and property addresses of about 70,000 people; live systems were not affected and SLA notified the PDPC and police. Sources: https://www.sla.gov.sg/news/press-release/security-incident-involving-an-ibm-managed-cloud-environment-/https://www.sla.gov.sg/news/press-release/security-incident-involving-an-ibm-managed-cloud-environment-/2cd3f2e422ebf3beFri, 03 Jul 2026 00:00:00 +0000SLA said an IBM-managed test cloud environment holding data of about 70,000 people was accessed without authorisation.https://www.csa.gov.sg/news-events/press-releases/csa-s-initiatives-to-strengthen-singapore-s-cyber-defences-amid-an-ai-driven-threat-landscape/df3c589619e852b0Tue, 30 Jun 2026 00:00:00 +0000CSA released the Singapore Cyber Landscape 2025/2026, reporting 165 ransomware cases and 284,300 infected systems in 2025.https://pwnsy.com/tools/cyber-watch/singapore/#all8e105cd50ec4370eMon, 15 Jun 2026 00:00:00 +0000The The Gentlemen group listed Times Software on its leak site on 2026-06-15. Sources: https://www.ransomware.live/id/VGltZXMgU29mdHdhcmVAdGhlZ2VudGxlbWVu