SPH Media has recently identified cyberattacks on five of its systems. They are believed to be a concerted effort that was carried out by the same threat actor.
There were attacks on two groups of our systems - the first on systems that contained some personal data, and the second was on systems that did not store any personal data. For the first group, the exposed information included predominantly email addresses, as well as some names, mailing addresses, and phone numbers. These amounted to nine per cent of our database. No payment card details, financial or banking information, or customer account access was compromised.
The second group involved unauthorised access to systems that did not contain any personal data.
Upon discovering the incidents, we immediately took steps to secure the affected systems and engaged external cybersecurity experts to investigate and contain the breaches. We concurrently reported the incident to the Personal Data Protection Commission, Cyber Security Agency of Singapore, Infocomm Media Development Authority and filed a police report. We have also informed all impacted parties about the incident and advised them about the precautions they should take. Our advisory is also posted on our website’s main page.
SPH Media takes the security and confidentiality of customers’ information very seriously, and has been working very closely with the relevant authorities and third party specialists. We advise customers to remain vigilant and exercise caution for suspicious and unsolicited emails, messages and calls, particularly those requesting personal information, passwords or payments, and to avoid clicking on suspicious links or attachments.
We remain committed to safeguarding the information entrusted to us.