Singapore
Southeast Asia · capital Singapore · cyber picture, physical security and relations with the EU on one page
Who targets Singapore
All 8 actors →
China (6) · 
South Korea (1) · 
Russia (1)| Actor | Suspected sponsor | In its news · 30d | Techniques |
|---|---|---|---|
| TraderTraitor named in the news only |  North Korea |
3 | — |
| TA505 | Russia |
— | 34 |
| Higaisa | South Korea |
— | 28 |
| APT1 | China |
— | 23 |
| Naikon | China |
— | 14 |
| Aoqin Dragon | China |
— | 9 |
| RANCOR | China |
— | 9 |
| APT41 | China |
— | 6 |
| Mofang | China |
— | 6 |
Cyber news 30 days
Every cyber article that mentions it →- Why data breaches are surging in Singapore, and why firms owe victims more than an apology
- Data of over 4,000 healthcare, community care employees potentially accessed in AIC cybersecurity incident
- Data breaches: Patient care not affected, says MOH; AIC latest to report cybersecurity incident
- Dementia Singapore app users' personal data potentially compromised in cyber incident
- Minmed reports 'malicious cybersecurity incident' involving teleconsult, health screening system
- Healthcare group Minmed reports cybersecurity incident affecting teleconsultation, screening services
- From data leaks, broken freezers to bank crashes, modern cyber threat lessons, where is the solution? TH
- Fullerton Health server hit by cyberattack; personal data of migrant workers affected
- CNA Explains: Your flight booking details have been leaked. What can hackers do with them?
- Fullerton Health server supporting migrant worker care programme hit by cybersecurity incident
Exploited vulnerabilities in its news 90 days
- CVE-2026-0257 Ransomware
- CVE-2026-63077 Ransomware
- CVE-2026-45659 Ransomware
- CVE-2026-59310 Ransomware
- CVE-2025-14733 Ransomware
- CVE-2026-15410 Ransomware
- CVE-2026-15409 Ransomware
- CVE-2025-60710 Ransomware
Incidents
Register →- Elevated Fullerton Health server supporting migrant worker care programme hit by cybersecurity incident Detected
- Moderate Dementia Singapore app users' personal data potentially compromised in cyber incident Detected
- High SPH Media hit by cyberattacks; no payment card details or financial information compromised Detected
- Moderate Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected Detected
- Moderate M1 hit by data breach Detected
- Elevated MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed Detected
- Moderate No further compromise to Alliance Medinet’s system, hacker access blocked, says parent company Detected
- Elevated Singapore embraces AI for cyber defence, with one caveat: breach transparency Detected
Cyber threat landscape as described in the country report of Nov 12 Machine-generated
The period from November 05 to November 12, 2026, witnessed a significant escalation in cyber incidents targeting Singaporean organizations, highlighting a pervasive and evolving threat landscape. Multiple data breaches were reported across critical sectors, including healthcare (Fullerton Health, Minmed Group, Doctor Anywhere, Dementia Singapore), media (SPH Media), telecommunications (M1), and education (Tappee school meal app). These incidents exposed a wide range of personal data, such as names, email addresses, phone numbers, NRIC/FIN numbers, dates of birth, residential addresses, membership IDs, financial assistance statuses, student concession card numbers, and, in the case of the Tappee app, sensitive health data like allergy profiles, height, weight, and caloric intake.
While most organizations reported that payment card details, financial information, or clinical records were not compromised, the sheer volume and sensitivity of the exposed personal data create substantial risks for individuals, including potential identity theft and targeted phishing scams. The SPH Media cyberattacks were attributed to a "concerted effort that was carried out by the same threat actor," indicating a potentially sophisticated and persistent adversary, though the specific actor was not named. The Tappee app breach was linked to a "security vulnerability exploited by an unauthorised external party." Singapore's Personal Data Protection Commission (PDPC) and Cyber Security Agency of Singapore (CSA) are actively investigating or monitoring these incidents, and the CSA issued advisories on data protection risks from insecure APIs and cyberattacks targeting remotely accessible Operational Technology (OT) Control Systems, underscoring the government's proactive stance in addressing these threats.
Background: Threat actors known to target Singapore include TA505 (Russia-linked), Higaisa (South Korea-linked), APT1 (China-linked), Naikon (China-linked), Aoqin Dragon (China-linked), RANCOR (China-linked), APT41 (China-linked), and Mofang (China-linked). TraderTraitor was named in news in the last 30 days.
Hotspots from the country report of Nov 12
Machine-generated- High Singapore City — Central hub for numerous cybersecurity incidents affecting various organizations.
- Moderate SAFTI Military Institute — Location of key defense policy announcements and Defence Technology Prize awards, indicating strategic focus on military innovation.
- Moderate Changi Naval Base — Major naval facility, relevant for naval UAV developments and maritime security operations.
- Moderate Straits of Singapore — Critical maritime zone for Singapore's security and trade, subject to ongoing maritime surveillance.
- Low Brussels — Location of the EU-Singapore Digital Partnership signing, signifying ongoing diplomatic and digital cooperation.
Threat level last reports
Machine-generatedLatest country report
Read the full report →Relations with the EU
Factsheet →Mentioned 2 times in latest briefing. Last updated: 2026-08-22
- 16 EU cooperation projects · 14 active
- 2 EU Digital & ICT projects: cyber activity here touches EU digital cooperation
- 4 trade or cooperation agreements on record
EU relations and implications country report of Nov 12
Machine-generatedSingapore's relations with the European Union during this period were characterized by continued progress in digital cooperation. On November 3, 2026, Singapore and the EU signed an agreement aimed at boosting connectivity between their digital markets, a key component of the broader EU-Singapore Digital Partnership (EUSDP). This partnership builds upon the EU-Singapore Digital Trade Agreement (EUSDTA), which officially entered into force on February 1, 2026. The EUSDTA is designed to facilitate open and secure cross-border data flows, promote digital trade, and establish trusted digital systems through enhanced cybersecurity collaboration and online consumer protection measures.
The recent wave of cybersecurity incidents in Singapore, particularly those involving significant personal data exposure across various sectors, carries implications for EU interests and EU-funded cooperation. While the EUSDTA explicitly includes provisions for strengthening cybersecurity and ensuring trusted data flows, these breaches highlight the persistent challenges in achieving robust digital security. For EU businesses and citizens engaging with Singapore's digital economy, these incidents could raise concerns about data protection and the reliability of digital infrastructure. Consequently, the security and cyber developments may prompt closer dialogue and potentially enhanced joint projects within the EUSDP framework, focusing on shared best practices, threat intelligence sharing, and capacity building to reinforce the resilience of digital ecosystems vital for both partners.
| Agreement | Type | Budget | Organisation | Period | Status | |
|---|---|---|---|---|---|---|
| ARISE Plus — ASEAN Regional Integration Support | Trade & Cooperation | EUR 94M | ASEAN | 2017–2024 | COMPLETED | Source ↗ |
| ASEAN Customs Transit System (ACTS) | Trade & Cooperation | — | ASEAN | 2020–2025 | ACTIVE | Source ↗ |
| EU-Singapore Free Trade Agreement (EUSFTA) | Free Trade Agreement | — | ASEAN | 2019 | ACTIVE | Source ↗ |
| EU-Singapore Investment Protection Agreement (EUSIPA) | Trade & Cooperation | — | ASEAN | 2018 | ACTIVE | Source ↗ |
Previous reports
Machine-generated- Singapore Security Report — November 11, 2026
- Singapore Security Report — November 10, 2026
- Singapore Security Report — November 09, 2026
- Singapore Security Report — November 08, 2026
- Singapore Security Report — November 07, 2026
- Singapore Security Report — November 06, 2026
- Singapore Security Report — November 05, 2026
- Singapore Security Report — November 04, 2026
- Singapore Security Report — November 03, 2026
- Singapore Security Report — November 02, 2026