Singapore succumbs to massive data breach in 'state-sponsored' attack

(Image credit: Pixabay)

Singapore has been hit by a major cyber attack that saw a database containing the personal information of about 1.5 million people, more than a quarter of the population, stolen.

The attack was first detected on July 4th and came weeks after SingHealth, the entity managing the state's health service, declared that it was going to cut off staff access to cloud storage (such as Dropbox, and OneDrive) on July 1st.

It is unknown whether the two are related but the reason given back in May 2018 was that these platforms were increasingly being used by cyber criminals to store malware.

Who was behind the attack?

The systematic siphoning of the SingHealth database went undetected for nearly three years and Singapore's government has confirmed that the records haven't been tampered with but only copied.

The attackers, an official press release highlights, "specifically and repeatedly targeted Prime Minister Lee Hsien Loong’s personal particulars and information on his outpatient dispensed medicines" adding, "It was not the work of casual hackers or criminal gangs".

While a VPN service wouldn't have stopped such an attack, it will provide with an additional layer of anonymity to those who use it, preventing hackers from mass collecting more data to build a better persona of their victims and ExpressVPN is our recommended VPN.

Via Singapore Ministry of Health

Desire Athow
Managing Editor, TechRadar Pro

Désiré has been musing and writing about technology during a career spanning four decades. He dabbled in website builders and web hosting when DHTML and frames were in vogue and started narrating about the impact of technology on society just before the start of the Y2K hysteria at the turn of the last millennium.

Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring
NetSuite EVP Evan Goldberg at SuiteConnect London 2025
"It's our job to deliver constant innovation” - NetSuite head on why it wants to be the operating system for your whole business