Why data breaches are surging in Singapore, and why firms owe victims more than an apology
A primary contributor is AI, which has sped up the discovery of system vulnerabilities.
Singapore has recently witnessed a surge in data breaches involving the exposure of personal information from various high-profile organisations. The breach notifications sent to affected individuals have increased significantly over the past month, prompting calls for companies to provide more than just apologies. The incidents stem from a combination of factors, including opportunistic scanning of system vulnerabilities, vendor supply-chain weaknesses, and targeted threat campaigns.
Artificial intelligence (AI) is believed to be a key driver behind the increased frequency and speed of these attacks. AI has accelerated the discovery of system vulnerabilities, with the number of disclosed vulnerabilities more than doubling in 2026 compared to previous months. Threat actors can now exploit vulnerabilities before they are publicly disclosed or vendor fixes are released, with some attacks occurring as early as seven days after a flaw is discovered.
A recent report from the Cyber Security Agency of Singapore (CSA) highlights the growing threat landscape driven by AI, noting that malware infections in Singapore have more than doubled from 2024 to 2025. The increasing pace of AI-enabled reconnaissance is allowing attackers to probe system misconfigurations rapidly, potentially leading to more targeted impersonation scams and social engineering.
To address this issue, government leaders and cybersecurity firms in Singapore are advocating for a "fight AI with AI" approach. The Cybersecurity Strategy 2026 emphasizes the need to act earlier, at a national scale, and at the speed of the threat. The CyberCall innovation challenge, supported by the CSA, offers funding for local projects developing AI-powered threat-hunting tools capable of automatically detecting and responding to fast-moving intrusions.
However, the effectiveness of technical defenses relies on more than just rapid upgrades. Companies and regulators must also implement stronger defense measures and ensure adequate human oversight to manage the risks associated with AI-driven cyberattacks.
Written by urgent.news from Straits Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
