Ransomware attack on DataPost compromises personal data of 1...

At least 146 Income Insurance customers had their personal information compromised in a ransomware attack on DataPost, a Singapore-based third-party vendor. Income Insurance suspended all ties with the firm, and authorities are working to assess the full extent of the breach. SINGAPORE: Personal data belonging to at least 146 Income Insurance policyholders has been compromised following a ransomware attack on DataPost, a Singapore-based data handling service provider. The incident, which was first reported on 27 May 2025 by cybersecurity platforms RedPacket Security and HookPhish, involved the use of multiple tools and infostealers by a threat group identified as "direwolf". The attackers reportedly carried out a data exfiltration operation, illegally transferring files from DataPost's systems in what appeared to be a coordinated and sophisticated campaign. According to state media C...