Ransomware Accounted for 58% of Singapore’s Recorded Cyber Incidents in 2025
Summary
Check Point Software’s report tracked more than 130 major Singapore cyber incidents in 2025. Ransomware accounted for 58%; government organizations led DDoS victim counts, while retail had the largest share of data breaches.
Key points
- Check Point Software reported more than 130 major cyber incidents in Singapore in 2025; over 60 were ransomware cases.
- Ransomware made up 58% of recorded incidents, with Qilin and Lynx prominent; the report describes attackers using double extortion.
- Government organizations accounted for 44% of DDoS victims, while business services accounted for 30%.
- Retail represented 42% of reported data-breach cases, despite accounting for 15% of targeted sectors overall.
- The report warns that AI-generated scams and deepfake fraud could increase deception-based attacks.
Article Details
- Publisher
- Check Point Software
- Report Period
- 2025
- Scope
- Major cyber incidents, ransomware, DDoS activity, and data breaches in Singapore.
- Sample Size
- More than 130 major incidents logged in Singapore in 2025.
- Key Statistics
- Ransomware accounted for 58% of recorded cyber incidents in Singapore in 2025.
- More than 60 ransomware cases were recorded in Singapore during 2025.
- Government-sector victims accounted for 44% of DDoS victims.
- Business services accounted for 30% of DDoS victims.
- Retail represented 42% of data breach cases in Singapore during 2025.
- Recommendations
- Adopt a proactive, prevention-first and safe-by-design remediation approach, and account for impersonation and social engineering risks alongside technical defenses.
People
Threat Actors
HIME666Identified in the report as a hacktivist group linked to information-system disruption activity.LynxIdentified by the report as prominent in ransomware activity affecting Singaporean organizations.NullSec PhilippinesIdentified in the report as a hacktivist group linked to information-system disruption activity.QilinIdentified by the report as prominent in ransomware activity affecting Singaporean organizations. The article says a local chemical manufacturer allegedly lost 165 GB of sensitive data to Qilin.
Vendors
Countries
Industries
business servicesBusiness services was the next most affected sector for DDoS activity, accounting for 30% of victims.GovernmentThe report highlights Qilin and Lynx ransomware activity, major DDoS pressure on government systems, and rising risks from AI-driven scams and deepfake fraud.RetailRetail led all breach cases, representing 42% of data breaches in 2025.