46,000 SIA booking records accessed illegally in data breach affecting software provider Amadeus

Channel NewsAsia (CNA)State / PublicCenterNov 4

French authorities reported that a cyberattack targeted the temperature monitoring systems of three regional blood banks in France over the weekend of October 31 to November 1, 2026. The Health Ministry confirmed that while the incident affected cold storage controls, it did not disrupt blood supplies because staff manually transferred inventory to unconnected refrigerators. Simultaneously, hackers compromised refrigeration units in supermarkets across eight European countries, resulting in significant food waste. This coordinated activity mirrors a previous attack in France three weeks prior, which caused fires and product loss at hundreds of retail locations. Investigations are currently underway to determine the attack vector and assess system safety, prompting broader EU discussions regarding vulnerabilities in critical connected infrastructure.

Bias read (Center): The report relies exclusively on official government statements and factual descriptions of the technical incident, avoiding speculative attribution or ideological commentary despite the geopolitical context mentioned.

The Straits TimesParty-aligned🔒CenterNov 3

Singapore Airlines (SIA) disclosed that approximately 46,000 booking records were illegally accessed through a data breach at its reservation technology provider, Amadeus. The compromised data includes customer names, booking references, travel itineraries, and, for a smaller subset of 620 records, email addresses, phone numbers, and travel document details. SIA stated that financial information such as bank accounts or credit cards was not exposed, and the incident did not involve a direct breach of SIA's own IT systems. The Personal Data Protection Commission has launched an investigation into the matter, while SIA is proactively contacting affected customers to update their booking reference numbers. This incident marks the third significant data breach involving SIA since 2021, joining other major carriers like Cathay Pacific and Japan Airlines who have also reported compromises linked to the same Amadeus vulnerability.

Bias read (Center): The article presents a straightforward corporate security incident using neutral, factual language and relies exclusively on official statements from the airline and regulatory bodies without editorializing or assigning political blame.

The Straits TimesParty-aligned🔒CenterNov 3

Singaporean electronics and furniture retailer Courts has been fined S$178,000 by the Personal Data Protection Commission (PDPC) for failing to protect the personal data of approximately 947,000 individuals during a ransomware attack in September 2022. The breach exposed sensitive information, including employee bank account details and customer identification numbers, after attackers accessed unpatched disaster recovery servers connected to the internet. The PDPC determined that Courts violated data protection obligations by excluding these specific servers from regular vulnerability scans and failing to apply necessary security updates, leaving the network vulnerable to exploitation. This incident marks the third time since 2019 that the company has breached data protection rules, leading the regulator to impose a significant penalty based on the scale of the compromise and the sensitivity of the leaked financial data.

Bias read (Center): The article presents a factual regulatory enforcement action against a private corporation using neutral language and citing official commission findings without political commentary.

The Straits TimesParty-aligned🔒CenterNov 3

Hackers breached the internal IT systems of the personal finance portal MoneySmart in October, compromising the personal data of some customers in Singapore and Hong Kong. The unauthorized access occurred on October 29, exposing sensitive information such as names, dates of birth, national identification numbers, contact details, income ranges, and vehicle insurance records. MoneySmart confirmed the breach to affected users via email on November 3 and stated that it had immediately halted the unauthorized access and secured its systems. Regulators in both jurisdictions, including the Monetary Authority of Singapore and the Personal Data Protection Commission, have been alerted and are actively investigating the incident. The company has hired independent cybersecurity experts to conduct a forensic investigation and perform a root cause analysis while assuring customers that its operations continue normally.

Bias read (Center): The article presents a straightforward report on a corporate security incident using neutral language and balanced sourcing from the company and regulators, typical of apolitical news.