Breach · 3 min read
SPH Media says attackers reached about 9% of its database through five systems
Singapore’s SPH Media, publisher of The Straits Times, says attacks between November 4 and 8 hit subscriber-order portals. No card, bank or account access, it says. What to watch for.
SPH Media, the Singapore publisher behind The Straits Times, The Business Times and other titles, said on November 10, 2026 that it had been hit by a data breach affecting about 9% of its database. The company says it found cyberattacks on five of its systems between November 4 and November 8. It says no payment card details, financial or banking information, or access to customer accounts were affected. The Business Times reported the statement.
What happened
According to SPH Media, the first attack was discovered on November 4, when it found unauthorized access to two portals used by staff and vendors who support subscriber orders. More attacks were detected on the following days, the latest on November 8. Based on preliminary investigations, the company suspects the attacks were AI-enabled and carried out by the same threat actor.
SPH Media says this was a direct attack on its systems, not a phishing attack, not someone clicking a link, and not a breach at a third party. It blames “a combination of factors such as software bugs and system configuration,” and says the bugs have been fixed and the configuration updated. It has hired a digital forensics and incident response firm, reported the incident to Singapore’s Personal Data Protection Commission, the Cyber Security Agency of Singapore and the Infocomm Media Development Authority, and filed a police report.
What we don’t know yet
SPH Media declined to say how many people the 9% represents or exactly which fields were in the affected records. It says the people affected have been informed and advised on precautions. The “AI-enabled” description is the company’s preliminary view; it hasn’t published technical details, so we can’t say what that involved.
What this means for you
If you subscribe to an SPH Media title, or have ordered a subscription through it, and you’ve received a notice from the company, your details were in scope. Since SPH says payment and banking data and account access weren’t affected, the main risk is contact details being used in scams that mention your real subscription.
What you can do
- Read any notice from SPH Media carefully, and contact the company only through details you find yourself on its official sites.
- Be wary of subscription “renewal”, “refund” or “billing problem” messages. SPH Media says to be cautious with unsolicited emails, messages and calls asking for personal information, passwords or payments, and not to click suspicious links or attachments.
- Don’t give one-time passcodes to anyone who calls you. No real publisher or bank needs them.
- If you reuse your SPH account password elsewhere, change it there and turn on multi-factor authentication where you can.
- See how scammers use leaked data to make phishing personal for examples of what these messages look like.
How Frame helps
Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Frame can also look up your verified emails in Have I Been Pwned’s breach database. Frame never collects or stores the leaked records themselves.
Related coverage
- M1 says customer names, NRIC details and addresses were taken in an October 30 breach: another Singapore company that reported a breach to the PDPC in the past two weeks.
- MoneySmart says an intruder copied customer data in Singapore and Hong Kong: a breach at a Singapore-based comparison site earlier this month.
Sources
- The Business Times, SPH Media hit by data breach affecting 9% of its database, November 10, 2026
More stories
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.