Introduction to Cyberattacks in Singapore
Organisations in Singapore are reporting a sharp rise in cyberattacks and cybersecurity concerns, according to new research from Rubrik Zero Labs. In its latest report, The State of Data Security in 2025: A Distributed Crisis, Rubrik found that 91% of IT and security leaders experienced cyberattacks over the past year, highlighting growing concerns around hybrid cloud environments and data security.
The Rise of Cyberattacks
The study points to the challenges created by rapid cloud adoption and increasingly complex IT infrastructures. As organisations move more sensitive information into hybrid cloud systems, attackers are broadening their tactics to exploit vulnerabilities across both cloud and on-premises environments. “Organisations are operating in a more connected and complex landscape, which creates new opportunities but also new risks,” said Sheena Chin, managing director for ASEAN at Rubrik. “In Singapore’s advanced digital environment, businesses must strengthen their ability to safeguard critical data to keep pace with emerging threats.”
Cyberattacks are Becoming More Frequent and Disruptive
The report notes that attacks have become a constant feature for many businesses:
- Nearly 20% of organisations in Singapore reported facing more than 25 cyberattacks in 2024 alone — averaging at least one attack every two weeks.
- Common attack vectors included malware infections (38%), phishing attempts (32%), insider threats (31%), breaches of cloud or SaaS environments (26%), and broader data breaches (23%).
The impact of these incidents was significant: - 38% of organisations reported reputational harm and declining customer trust.
- 37% faced higher security costs.
- 33% said a cyberattack led to leadership changes at the executive level.
AI, Cloud, and Data Complexity Add to the Security Burden
The rise of AI and continued cloud adoption are also complicating data protection efforts. According to the survey, 92% of IT and security leaders in Singapore are managing hybrid cloud environments, with about half reporting that most of their workloads are now hosted in the cloud. This shift has introduced several challenges:
- 42% listed data security in hybrid environments as their most significant challenge.
- 36% pointed to data privacy and compliance as a major concern.
- 34% highlighted a lack of centralised visibility and control over their environments.
Rubrik’s telemetry data also shows that 36% of sensitive files are classified as high-risk, including personally identifiable information (PII) like Social Security numbers, phone numbers, intellectual property, and source code.
Ransomware and Identity-Based Threats Continue to Evolve
Ransomware attacks continue to be a major concern for organisations in Singapore.
- Among those hit by ransomware, 95% reported paying the ransom to recover their data.
- 75% said threat actors were able to partially compromise backup and recovery systems.
- 38% reported full compromise of their backup environments.
Identity threats are also rising alongside the spread of cloud services. The report found that 91% of organisations are using between two and five cloud or SaaS platforms, which is creating new vulnerabilities in identity and access management. Attackers are increasingly targeting these gaps in order to move laterally across systems and escalate attacks.
A Need for a Data-First Security Approach
The findings suggest that organisations in Singapore are operating in a threat landscape where traditional perimeter-based defences are no longer enough. With hybrid environments becoming the norm and attackers adapting quickly, a shift toward securing critical data directly — regardless of where it resides — is increasingly necessary. As cyber threats continue to evolve, organisations that proactively identify and protect sensitive information are more likely to maintain resilience and adapt to future risks.
Conclusion
In conclusion, cyberattacks are becoming more frequent and disruptive in Singapore, with organisations facing significant challenges in protecting their data. The rise of AI, cloud adoption, and data complexity are adding to the security burden, and ransomware and identity-based threats continue to evolve. To stay ahead of these threats, organisations must adopt a data-first security approach, prioritising the protection of sensitive information and proactively identifying and addressing vulnerabilities.
FAQs
Q: What percentage of organisations in Singapore experienced cyberattacks in the past year?
A: 91% of IT and security leaders experienced cyberattacks over the past year.
Q: What are the most common attack vectors in Singapore?
A: Malware infections, phishing attempts, insider threats, breaches of cloud or SaaS environments, and broader data breaches.
Q: What is the impact of cyberattacks on organisations in Singapore?
A: Reputational harm, declining customer trust, higher security costs, and leadership changes at the executive level.
Q: What is the percentage of sensitive files classified as high-risk in Singapore?
A: 36% of sensitive files are classified as high-risk, including personally identifiable information (PII) like Social Security numbers, phone numbers, intellectual property, and source code.
