Singtel data breached through hack on third-party file sharing vendor
Singtel on Thursday said unidentified hackers illegally attacked a third-party standalone system it uses to share information internally and with external stakeholders.
Singapore Telecommunications (Singtel) on Thursday said unidentified hackers illegally attacked a third-party standalone system it uses to share information internally and with external stakeholders.
Customer information may have been compromised, the telco said in a bourse filing. It also noted that this is an isolated incident and its core operations remain unaffected.
Third-party vendor Accellion informed Singtel that the file-sharing system called FTA was hacked as part of a "wider concerted attack" against the system's users.
The enterprise content firewall provider said in a Feb 1 press statement that FTA, a 20-year-old product nearing the end of its life, was the target of a "sophisticated cyberattack".
It notified all FTA customers of the attack on Dec 23, 2020. The initial incident, which occurred in mid-December, was the beginning of a concerted cyberattack on the system which continued into January 2021.
At this time, Accellion has patched all known FTA vulnerabilities exploited by the attackers. It has added new monitoring and alerting capabilities to flag anomalies associated with the attack vectors.
Singtel said it has suspended all use of the system and activated investigations, working closely with cybersecurity experts and the relevant authorities, including the Cyber Security Agency of Singapore - which is providing additional guidance.
The telco is conducting an impact assessment with the utmost urgency to ascertain the nature and extent of data that has been potentially accessed, it said. Its priority is to work directly with customers and stakeholders whose information may have been compromised to keep them supported and help them manage any risks.
"We will reach out to them at the earliest opportunity once we identify which files relevant to them were illegally accessed," Singtel added.
Shares of Singtel closed at S$2.40 on Wednesday, down S$0.01 or 0.4 per cent.
Source: Business Times © Singapore Press Holdings Ltd. Permission required for reproduction.