On Tuesday (10 Nov), SPH Media released a statement stating that it had detected cyberattacks on five of its systems.
The media company believed the attacks came from the same threat actor.
It first detected an incident on 4 Nov, and most recently on 8 Nov.
Preliminary investigations suggested the intrusions could be AI-enabled attacks.
The breaches arose from “a combination of factors, including software bugs and system configuration”.
The cyberattacks affected 9% of SPH Media’s database.
The exposed information mainly included email addresses. Some names, mailing addresses, and phone numbers were also exposed.
In the statement, SPH Media confirmed that no payment card details, financial or banking information, or customer account access were compromised.
It said that the cyberattack did not affect any corporate customer information.
However, some employee email addresses were compromised.
The company has informed the affected employees to remain vigilant.
SPH Media has also reached out to affected users directly to inform them of the breach.
Source: Reddit
One user shared a screenshot of the e-mail notification they received from SPH Media on Reddit, received at 3.08 pm on 10 Nov.
Upon discovering the incidents, SPH Media immediately secured the affected systems and also engaged external cybersecurity experts to investigate and contain the breaches.
In addition, it reported the incidents to the Personal Data Protection Commission, Cyber Security Agency of Singapore, Infocomm Media Development Authority, and also filed a police report.
We have also informed all impacted parties about the incident and advised them about the precautions they should take.
SPH Media has also released an advisory on its website warning customers of fake articles, websites, and advertisements.
It strongly advises readers to visit the official website or contact the Customer Experience team with any cybersecurity concerns.
The company also points to its official web domains page as a guide to identify valid links from SPH Media.
It advises customers that all authentic SMS communications will display “SPH Media” as the sender.
SPH Media also reminds users that it will never ask for cash transfers to a personal bank account, disclosure of bank login details or passwords, or sharing of One-Time Passwords (OTPs) with another person.
We remain committed to safeguarding the information entrusted to us.
Also read: SPF cyber operation detects 383 scam victims & prevents over S$17.4 million in potential losses
Have news you must share? Get in touch with us via email at news@mustsharenews.com.
Featured image adapted from ZKang123 via Wikimedia Commons. For illustration purposes only.
