HomeTeamNS Hit by Ransomware Attack, Employee and Member Data Potentially Exposed Singapore’s non-profit organization HomeTeamNS disclosed a ransomware attack on February 25, which compromised access to some of its servers. The affected systems were immediately isolated to prevent further spread, and third-party cybersecurity experts were engaged to investigate and remediate the incident. The breached servers contained employee and ex-employee data, as well as vehicle details of members and affiliate members. While there is currently no evidence of data extraction, HomeTeamNS is closely monitoring the situation. The organization, which supports over 260,000 national servicemen (NSmen) from the Singapore Police Force (SPF) and Singapore Civil Defence Force (SCDF), operates four clubhouses and organizes social activities for its members. In response, HomeTeamNS reset all administrative account passwords, enhanced security scans, and strengthened firewalls. The incident has been reported to Singapore’s police and the Cyber Security Agency (CSA), with affected individuals already notified and provided assistance to mitigate risks like phishing or unauthorized transactions. Ransomware remains a persistent global threat, though international law enforcement efforts have slowed its growth—rising 15% in 2024 compared to 77% in 2023, per the US Cyber Threat Intelligence Integration Center (CTIIC). However, new ransomware variants emerged in late 2024, signaling ongoing risks. Many attacks exploit known vulnerabilities and weak security practices, such as default passwords, as seen in Indonesia’s June 2024 PDN-2 breach, which disrupted government services. In Singapore, SMEs in manufacturing and retail are frequent targets, though unreported incidents may obscure the full scale of the threat. Recent local cases include a 2023 ransomware attack on law firm Shook Lin & Bok, which also involved police and CSA investigations.