Incident register

Cyber incidents in Asia-Pacific with their sources, countries, sectors and relevance to the EU. Since September 12, 2026 they are detected by rules in the news after every fetch: Detected entries have not been reviewed by an analyst. How detection works

CSV STIX 2.1 MISP

13Incidents in the period

8High or critical

2With a named actor

13Of high or medium EU relevance 8Detected, not reviewed

Incidents newest first

Date	Incident	Type	Countries	Actor named
Nov 11, 2026	Moderate Dementia Singapore app users' personal data potentially compromised in cyber incident Detected EU medium 1 article	Intrusion	Singapore	—
Nov 10, 2026	High SPH Media hit by cyberattacks; no payment card details or financial information compromised Detected EU medium 4 articles	Data breach	Singapore	—
Nov 10, 2026	Moderate Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected Detected EU medium 1 article	Data breach	Singapore	—
Nov 3, 2026	Elevated MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed Detected EU medium 3 articles	Data breach	Singapore, Hong Kong	—
Oct 30, 2026	High Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack Detected EU medium 8 articles	Data breach	Japan, Singapore, Thailand, Malaysia +1	—
Oct 25, 2026	Elevated Singapore embraces AI for cyber defence, with one caveat: breach transparency Detected EU medium 1 article	Data breach	Singapore, Australia	—
Oct 4, 2026	Elevated South Korean president orders probe into data leaks across financial industry Detected EU medium 1 article	Data breach	Singapore	—
Sep 25, 2026	High North Korean cybercriminals linked to $352M heist from crypto exchange Bitget Detected EU medium 4 articles	Cryptocurrency theft	Singapore, Vietnam	—
Sep 11, 2026	Critical GitLab maximum-severity path traversal exploited within hours of disclosure EU high	Supply chain	India, Japan, Singapore	Unattributed - opportunistic mass exploitation
Sep 9, 2026	High Dutch NCSC warns critical Check Point VPN flaws face imminent exploitation EU high	Other	Japan, Singapore, Australia	No confirmed threat actor; pre-exploitation advis…
Sep 2, 2026	Critical SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution EU high	Other	Japan, Singapore, Australia	Unattributed
Aug 28, 2026	Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days EU medium	APT activity	Singapore, Vietnam, Indonesia	APT31
Apr 28, 2026	Critical Lazarus Group Cryptocurrency Exchange Heist — Singapore EU high	APT activity	Japan, Singapore, South Korea	Lazarus Group

csrftoken	CSRF protection — prevents cross-site request forgery attacks	1 year	Essential
sessionid	Session management — keeps authenticated users logged in	14 days	Essential