SPH Media data breach

SPH Media announced a data breach on Nov 10, 2026, exposing names, email addresses, addresses and phone numbers. The number of people affected has not been disclosed. It was caused by a cyberattack. Singapore's IMDA and Personal Data Protection Commission are investigating the incident, and CSA is monitoring it; no decision yet. No settlement or compensation has been announced.

What happened

Singapore publisher SPH Media said on November 10, 2026 that five of its systems had been hit by cyberattacks between November 4 and November 8, believed to be by the same threat actor. Data exposed was mostly email addresses, names, mailing addresses and phone numbers, amounting to about 9% of its database; no payment card, banking data or account access was compromised. SPH Media did not give the number of people, has informed those affected and reported the incident to the PDPC, CSA, IMDA and police.

What should I do?

1. Be cautious with emails, texts and calls about your newspaper subscription, renewals or payments, and don't click links in them.
2. Never give passwords, OTPs or payment details to anyone who contacts you; manage your subscription only through SPH Media's official website or app.
3. Expect more targeted phishing that uses your name and mailing address, and report scams via ScamShield or 1799.

More data breaches in Singapore →

Check the other services you use →