Reporting Ransomware

If you are a victim of a ransomware attack, follow these steps:

Lodge an online police report. Upon lodging a police report, the Singapore Cyber Emergency Response Team (SingCERT) under the Cyber Security Agency of Singapore (CSA) will also be notified.
If you are representing an organisation that has had a data breach incident that is likely to cause significant harm* to the affected individuals, OR affects a significant scale of individuals (i.e., 500 or more), you are legally required to notify the Personal Data Protection Commission (PDPC). For more information, visit the PDPC website.

*To provide certainty to organisations on the data breaches that are notifiable, the PDP (DBN) Regulations 2021 provides the personal data (or classes of personal data) that is deemed to result in significant harm to affected individuals if compromised in a data breach. Where a data breach involves any of the prescribed personal data, the organisation will be required to notify the affected individuals and the PDPC of the data breach.

Timely reporting is necessary for law enforcement to conduct effective investigations and improve overall understanding of ransomware criminal operations.

SPF | Reporting Ransomware

Find Out More