M1 data breach
Was I affected?
M1 confirmed a breach affecting an undisclosed number of people, exposing names, national id numbers, dates of birth and phone numbers. You may be affected if you are an M1 mobile or broadband customer in Singapore; M1 is notifying affected customers by email or letter.
| Announced | Nov 6, 2026 |
|---|---|
| When it happened | October 30, 2026 |
| Country | Singapore |
| Data exposed | Names, National ID numbers, Dates of birth, Phone numbers, Email addresses and Addresses |
| Status | Confirmed by the company or a regulator filing |
What happened
Singapore telco M1 said on November 6, 2026 that it suffered a data breach on October 30 that compromised customers' names, NRIC or FIN numbers, dates of birth, mobile numbers, email addresses and residential addresses. M1 says no payment card, financial or banking information or account access details were taken, the breach has been contained and its services were not affected. It has not said how many customers are affected and will alert them by email or letter. Singapore's Personal Data Protection Commission says it is investigating.
What should I do?
- Be cautious with unsolicited calls, texts and emails that quote your NRIC, address or M1 number, and verify callers through M1's official channels.
- Never share OTPs, Singpass details or banking passwords, even if the caller knows your personal details.
- Ask M1 to add a PIN or extra verification for SIM replacements and plan changes so no one can take over your number.
- Check your bank and Singpass activity for accounts or applications you didn't make and report anything suspicious to the police.
More data breaches in Singapore →
Check the other services you use →
Sources
- M1 hit by data breach · The Straits Times · news
- M1 and Doctor Anywhere hit by data breaches; personal information compromised · CNA · news