SPH Media targeted by cyberattacks in SG, compromising 9% customer personal data
SINGAPORE: SPH Media has suffered cyberattacks on five systems, exposing some customers’ personal information, although financial details and account access were left untouched. The attacks affected two groups of systems. One contained personal information, while the other held no personal data. The compromised information included names, email addresses, mailing addresses and phone numbers.…
SINGAPORE has faced a series of cyberattacks on SPH Media, a prominent media company, resulting in the exposure of 9% of its customer personal information. Despite personal details like names, email addresses, and phone numbers being compromised, financial data and account access remained secure. The attacks impacted two distinct groups of systems, with one group containing personal information and the other devoid of such data.
SPH Media suspects the same threat actor orchestrated both incidents as part of a coordinated effort, though they have not confirmed whether artificial intelligence (AI) was employed. The company discovered the first breach on November 4 and the most recent one on November 8, promptly taking action by securing the affected systems and engaging external cybersecurity professionals to investigate and mitigate the breaches.
The media organization reported the incidents to relevant authorities, including the Personal Data Protection Commission (PDPC), Cyber Security Agency of Singapore (CSA), Infocomm Media Development Authority (IMDA), and the police. Customers affected by the breaches have been notified, and they have been advised on necessary precautions.
The Personal Data Protection Commission (PDPC), Cyber Security Agency of Singapore (CSA), and Infocomm Media Development Authority (IMDA) are actively investigating the matter, while the Cyber Security Agency (CSA) is monitoring the situation closely. The agencies have requested SPH Media to take steps to minimize the impact and identify the root cause of the attacks.
Recent data breaches have raised concerns among customers, particularly amidst other reported incidents involving organizations that serve Singapore's citizens. For instance, M1, a telecommunications provider, and telehealth service Doctor Anywhere both reported breaches on November 6, exposing sensitive personal details. Additionally, around 46,000 Singapore Airlines booking records were accessed through a breach involving software provider Amadeus, affecting at least eight airlines, though financial information remained untouched.
While the compromised data in SPH Media's case does not pose an immediate risk, the exposed contact information could still be exploited for phishing attempts and scams. The incident underscores the importance of vigilance, caution, and best practices for data protection. Organisations must make customer data protection a fundamental responsibility rather than an afterthought.
The breach also highlights the prevalence of data breaches involving Singapore organizations. Earlier this year, IBM's cloud environment for the Singapore Land Authority (SLA) experienced an unauthorized access, exposing personal data belonging to approximately 70,000 individuals.
Written by urgent.news from The Independent Singapore's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
