SPH Media reports cyberattacks on five systems, no financial data compromised
SPH Media confirmed cyberattacks affecting five of its systems, exposing about 9% of its customer database but no payment or banking details.
SPH Media said it experienced cyberattacks on five of its systems between Nov. 4 and Nov. 8, affecting both platforms that store personal data and those that do not. The breach exposed roughly 9% of the company’s database, including email addresses, names, mailing addresses and phone numbers, but no payment card, financial or banking information, nor customer account access, the spokesperson told CNA.
The company said it promptly secured the affected systems and engaged external cybersecurity experts to investigate and contain the incidents. It also reported the matter to Singapore’s Personal Data Protection Commission, the Cyber Security Agency, the Infocomm Media Development Authority and the police, and notified all impacted individuals with precautionary advice.
In a joint response, the Infocomm Media Development Authority, the Personal Data Protection Commission and the Cyber Security Agency confirmed awareness of the attacks. The authorities are investigating the breach, with the Cyber Security Agency monitoring developments. They urged organisations to strengthen protective measures and the public to stay vigilant against phishing and scams.
The incident follows recent data breaches at telecom provider M1 and telehealth service Doctor Anywhere, which also saw personal information disclosed.