Incident register

Cyber incidents in Asia-Pacific with their sources, countries, sectors and relevance to the EU. Since September 12, 2026 they are detected by rules in the news after every fetch: Detected entries have not been reviewed by an analyst. How detection works

CSV STIX 2.1 MISP

28Incidents in the period

9High or critical

2With a named actor

13Of high or medium EU relevance 22Detected, not reviewed

Incidents newest first

Date	Incident	Type	Countries	Actor named
Nov 11, 2026	Elevated Fullerton Health server supporting migrant worker care programme hit by cybersecurity incident Detected 2 articles	Other	Singapore	—
Nov 11, 2026	Moderate Dementia Singapore app users' personal data potentially compromised in cyber incident Detected EU medium 1 article	Intrusion	Singapore	—
Nov 10, 2026	High SPH Media hit by cyberattacks; no payment card details or financial information compromised Detected EU medium 4 articles	Data breach	Singapore	—
Nov 10, 2026	Moderate Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected Detected EU medium 1 article	Data breach	Singapore	—
Nov 6, 2026	Moderate M1 hit by data breach Detected 2 articles	Data breach	Singapore	—
Nov 3, 2026	Elevated MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed Detected EU medium 3 articles	Data breach	Singapore, Hong Kong	—
Oct 30, 2026	High Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack Detected EU medium 8 articles	Data breach	Japan, Singapore, Thailand, Malaysia +1	—
Oct 27, 2026	Moderate No further compromise to Alliance Medinet’s system, hacker access blocked, says parent company Detected 1 article	Intrusion	Singapore	—
Oct 25, 2026	Elevated Singapore embraces AI for cyber defence, with one caveat: breach transparency Detected EU medium 1 article	Data breach	Singapore, Australia	—
Oct 24, 2026	Moderate Personal data of 110,000 members compromised in Alliance Medinet cyber incident Detected 2 articles	Data breach	Singapore	—
Oct 22, 2026	Elevated Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat Detected 1 article	Exploitation	Singapore	—
Oct 13, 2026	Elevated National Youth Council mistakenly leaks personal data of 600 SG Youth Forum participants Detected 1 article	Data breach	Singapore	—
Oct 4, 2026	Elevated South Korean president orders probe into data leaks across financial industry Detected EU medium 1 article	Data breach	Singapore	—
Sep 30, 2026	Moderate Bee Cheng Hiang customers’ e-mail addresses exposed in first case of AI-related data breach in S’pore Detected 2 articles	Data breach	Singapore	—
Sep 27, 2026	Moderate More than 23,500 Simba customers affected in data breach involving IC numbers, birth dates Detected 3 articles	Data breach	Singapore	—
Sep 25, 2026	High North Korean cybercriminals linked to $352M heist from crypto exchange Bitget Detected EU medium 4 articles	Cryptocurrency theft	Singapore, Vietnam	—
Sep 18, 2026	Moderate Gemini hacked three companies in first known breakout by Google's AI Detected 1 article	Intrusion	Singapore	—
Sep 16, 2026	Moderate Ex-HDB group director accused of breaching its database 161 times Detected 1 article	Data breach	Singapore	—
Sep 15, 2026	Elevated Payroll system of mosques, madrasahs hit by ransomware; staff details potentially compromised Detected 1 article	Ransomware	Singapore	—
Sep 15, 2026	Elevated MUIS says human resource management system hit by cybersecurity incident Detected 2 articles	Ransomware	Singapore	—
Sep 14, 2026	Elevated CenterPoint Energy discloses customer data breach in SEC filing Detected 1 article	Data breach	Singapore	—
Sep 12, 2026	Elevated Revolut confirms sensitive customer data breach, falling for fake government requests Detected 1 article	Data breach	Singapore	—
Sep 11, 2026	Critical GitLab maximum-severity path traversal exploited within hours of disclosure EU high	Supply chain	India, Japan, Singapore	Unattributed - opportunistic mass exploitation
Sep 9, 2026	High Dutch NCSC warns critical Check Point VPN flaws face imminent exploitation EU high	Other	Japan, Singapore, Australia	No confirmed threat actor; pre-exploitation advis…
Sep 2, 2026	Critical SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution EU high	Other	Japan, Singapore, Australia	Unattributed
Aug 28, 2026	Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days EU medium	APT activity	Singapore, Vietnam, Indonesia	APT31
Aug 21, 2026	High Krybit Ransomware Publishes 114GB from Singapore Clinic Group	Ransomware	Singapore	Krybit ransomware group
Apr 28, 2026	Critical Lazarus Group Cryptocurrency Exchange Heist — Singapore EU high	APT activity	Japan, Singapore, South Korea	Lazarus Group

csrftoken	CSRF protection — prevents cross-site request forgery attacks	1 year	Essential
sessionid	Session management — keeps authenticated users logged in	14 days	Essential