Singapore Hit by 21 Million Cyberattacks in 2024 as Ransomware Strikes Major Banks In April 2024, Singapore faced a significant cybersecurity breach when a ransomware attack on a printing vendor exposed sensitive customer data from DBS and the Bank of China’s Singapore branch (BOC). The incident compromised 8,200 DBS customers and 3,000 BOC customers, with stolen data including names, addresses, and, in some cases, loan account numbers. Neither bank reported compromised login credentials. The attack highlights Singapore’s growing vulnerability to ransomware, which led Asean in cyberattacks in 2024, with 21 million incidents targeting compromised servers. Ransomware, a type of malware that encrypts or locks data until a ransom is paid, has evolved into more sophisticated threats, including double-extortion (threatening data leaks) and triple-extortion (targeting customers or partners). Some variants, like wipers, destroy data even after payment. Banks are particularly high-value targets due to their real-time operations and sensitive data. Experts warn that attacks can disrupt online banking, payment systems, and trigger prolonged recovery efforts, compliance audits, and regulatory scrutiny. AI-powered ransomware further complicates defenses by adapting during attacks. Cybersecurity professionals emphasize that ransomware groups now prioritize data theft over encryption, leveraging stolen information for long-term extortion. Many attacks begin with weeks or months of reconnaissance, allowing hackers to bypass defenses before striking. While organizations deploy tools like Endpoint Detection and Response (EDR) and Identity Access Management (IAM), a layered security approach aligned with frameworks like NIST is critical. Smaller vendors, often lacking robust cybersecurity, remain a weak link in supply chain attacks.