More than 11,000 DBS, Bank of China customers' information compromised after data attack on vendor
SINGAPORE – Customer data from two banks here was stolen in a ransomware attack on a printing vendor, though no login information was compromised.
In a joint statement late on April 7, the Cyber Security Agency of Singapore (CSA) and Monetary Authority of Singapore (MAS) said the two banks were DBS Bank and Bank of China, Singapore (BOC).
DBS said the customer statements of around 8,200 customers were potentially compromised, while BOC separately said that the breach affected around 3,000 customers, whose paper letters were printed and distributed by Toppan Next Tech.
Both banks added that their respective systems had not been compromised, and customer monies remained safe. DBS added that there was no evidence of unauthorised transactions resulting from the incident so far.
According to DBS, the affected customers are mainly users of brokerage DBS Vickers and short-term loan service Cashline.
The potentially compromised information came from statements or letters sent to individual customers between December 2024 and February 2025.