Breaches and incidents
MUIS / Avelogic SmartHRMS (Singapore): ransomware hits payroll system for mosques and madrasahs
MUIS confirmed on 15 Sep a cybersecurity incident involving an HR system operated by Avelogic.
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- MUIS confirmed on 15 Sep a cybersecurity incident involving an HR system operated by Avelogic; per Mothership, clients included 48 mosques, four madrasahs, ILHAM and MMWSS, and per MS News the system reportedly held staff names, contact details, salaries and bank account numbers.
- Root cause: not disclosed; MS News reports confirmed threat actor activity from 30 to 31 Aug and that the system was “reportedly hacked by ransomware.”
- No attacker named; MUIS said no ransom was paid.
- Avelogic said there is no evidence a large amount of data was taken, notified the PDPC as a data intermediary, and a police report was lodged (31 Aug per MS News); alternative payroll arrangements were put in place. The attack predates the window but MUIS’s first public confirmation was 15 Sep.