Technology1 min read

SPH Media hit by cyberattacks; no payment card details or financial information compromised

By · Published by Everything Blog

In short

SPH Media suffered breaches across five internal systems from Nov 4 to Nov 8 in what is suspected to be a coordinated, artificial intelligence-enabled operation. The incident exposed personal contact details affecting nine per cent of the database, including some employee e-mail addresses, names, mailing addresses, and phone numbers. Crucially, investigators verified that no payment card numbers, banking details, or corporate client files were accessed. External cybersecurity specialists were brought in to remediate software bugs, refresh system configurations, and fortify network barriers.

Key points

  • No financial records, payment card information, or corporate customer accounts were acces…: No financial records, payment card information, or corporate customer accounts were accessed during the incident.
  • Preliminary inquiries suggest the intrusions may have involved artificial intelligence-en…: Preliminary inquiries suggest the intrusions may have involved artificial intelligence-enabled techniques targeting software bugs and configuration weaknesses.
  • SPH Media notified relevant Singapore authorities, including the police and data privacy…: SPH Media notified relevant Singapore authorities, including the police and data privacy regulators, while warning customers to monitor for unsolicited messages.

Sources checked by our analysis pipeline: 1

SINGAPORE - SPH Media said on Nov 10 that it was hit by cyberattacks that affected nine per cent of its database.

The exposed information was predominantly e-mail addresses, as well as some names, mailing addresses and phone numbers. No payment card details, financial or banking information, or customer account was compromised.

In a statement on Nov 10, the media company said it had identified cyberattacks on five of its systems, which it believed are “a concerted effort that was carried out by the same threat actor”.

The first incident was detected on Nov 4, and the most recent incident on Nov 8.

SPH Media said it suspects the intrusions could be artificial intelligence-enabled attacks, based on preliminary investigations.

The breaches arose from a combination of factors, including software bugs and system configuration, said its spokesman.

Upon discovering the incidents, SPH Media said it immediately took steps to secure the affected systems and engaged external cybersecurity experts to investigate and contain the breaches.

The organisation also reported the incident to the Personal Data Protection Commission, Cyber Security Agency of Singapore…

Technology