The compromised data primarily exposed customer contact details, including names, email addresses, phone numbers, and physical mailing addresses, without breaching any payment mechanisms or accounts. SPH Media promptly initiated containment protocols, retained third-party cybersecurity experts, and alerted all individuals whose records were accessed. The publisher subsequently filed formal reports with the police, the Cyber Security Agency of Singapore, the Infocomm Media Development Authority, and the Personal Data Protection Commission. While internal reporting in The Straits Times placed the attacks between Nov 4 and Nov 8, a company spokesperson declined to confirm that specific operati…
Key points
External cybersecurity experts and national authorities were deployed to contain the brea…: External cybersecurity experts and national authorities were deployed to contain the breach and secure vulnerable systems.
Singapore faces a wider wave of digital breaches following recent attacks on telco M1 and…: Singapore faces a wider wave of digital breaches following recent attacks on telco M1 and Doctor Anywhere.
An SPH Media spokesperson declined to verify reported operational dates indicating attack…: An SPH Media spokesperson declined to verify reported operational dates indicating attacks occurred between Nov 4 and Nov 8.
Sources checked by our analysis pipeline: 1
The cyberattacks were believed to be a concerted effort by the same threat actor, an SPH Media spokesperson said.
SINGAPORE: SPH Media has been hit by cyberattacks on five of its systems, but no customer financial information or account access was compromised, the company said on Tuesday (Nov 10).
"(The cyberattacks) are believed to be a concerted effort that was carried out by the same threat actor," an SPH Media spokesperson said in response to CNA's queries, without elaborating on the nature of the threat actor.
The cyberattacks hit two groups of SPH Media's systems: one on systems that contained some personal data, and the other on systems that did not store any such data.
The compromised information included mostly email addresses, names, mailing addresses and phone numbers. This amounted to 9 per cent of the company's database.
"No payment card details, financial or banking information, or customer account access was compromised," said the spokesperson.
The SPH Media statement did not specify the extent of its database exposed by the cyberattacks that hit systems not containing personal data.
Global transit leaders gathered to examine emerging technologies aimed at modernizing urban commutes and addressing infrastructure constraints. The event emphasized contactless station access, artificial intelligence for emergency vehicle navigation, and space-saving safety retrofits for rail networks. These developments signal a concerted push toward automated, high-efficiency transit systems across major metropolitan hubs.
Unauthorized external actors exploited a platform vulnerability in a third-party vendor system, exposing personal and dietary records belonging to students and their guardians across Singapore. SATS confirmed its own corporate IT infrastructure remained secure while the meal ordering tool was suspended for remediation. The incident has been escalated to data privacy regulators as alternative school-managed distribution protocols keep daily food deliveries running.
Food solutions provider SATS has temporarily suspended the platform developed by third-party vendor Serial Multivision while cybersecurity reviews and remediation efforts take place. The incident exposed student identification data and parental contact details across four Singapore institutions, though core meal delivery operations remain uninterrupted under direct school supervision. Regulatory authorities have been notified alongside impacted families to address potential privacy risks.