Singapore Cyber Incidents Triple Since September, CSA Says; PDPC Sees No Clear Link Between Breaches

Since September, Singapore's Cyber Security Agency has received three times the average monthly number of reported cyber incidents seen from January to August. Its statement on 13 November says the attacks do not appear to be part of coordinated campaigns targeting Singapore, and that some came in through compromised third-party suppliers.

It gives no raw count and names no victim.

The data regulator, the PDPC, reached a similar view. It said its preliminary findings point to opportunistic attacks exploiting common IT vulnerabilities, with no clear connections between incidents, though some were tied to breaches abroad.

Organisations hit, as reported in the press

CNA lists Minmed, Doctor Anywhere, Fullerton Health and the Agency for Integrated Care among the healthcare victims, alongside M1, Singapore Airlines and SPH Media. Earlier coverage here includes the M1 leak of NRIC numbers and addresses, the SPH Media attack, the Singapore Airlines exposure through Amadeus, and the six healthcare bodies MOH confirmed.

CSA also notes that attackers actively scan the Internet for vulnerable systems, so a company can be hit without anyone singling it out. It warns that attackers' growing use of AI could reduce the time organisations have to secure their systems.

What the two agencies want organisations to do

CSA asks organisations to secure internet-facing systems first, patch known flaws promptly, turn on multi-factor authentication, watch for suspicious activity and have a business continuity plan ready to use. It has briefed all Critical Information Infrastructure sectors and is talking to trade associations and chambers. Incidents can be reported to SingCERT or to the Cyber Incident Helpline on 6890 9555; smaller firms can get up to 70% co-funding for CSA's CISO-as-a-Service scheme.

The PDPC adds data-handling steps: encrypt sensitive data or keep it offline, and don't hold data that's no longer needed. In a LinkedIn post, the PDPC's Denise Wong wrote that "Threat actors are moving faster than before to exploit common vulnerabilities."

Advice for people whose data was exposed

The PDPC asked the public to share only the information a service needs, use a secondary email address for non-essential sign-ups and watch for phishing, especially after a breach notification.