Banking Customer Data Exposed Following Ransomware Attack on Vendor

A ransomware attack on a third-party printing vendor led to the exfiltration of about 8,200 customer statements and letters for DBS Bank and Bank of China (Singapore) dated December 2024–February 2025, exposing names, postal addresses and certain financial details; banks report no breach of their own systems, no customer credentials or account balances were disclosed, and no unauthorized transactions have been detected. Investigations are ongoing and potentially affected customers are being notified. The report underscores the risk posed by vendor/supply-chain compromises and recommends stronger vendor security, encryption, and coordinated incident response.