M1

Summary

M1, a Singapore-based telecommunications provider, disclosed that it suffered a data breach which has since been contained. Compromised information included customer names, identity card details, dates of birth, mobile numbers, e-mail addresses and physical addresses, while payment card details, financial or banking information and customer account access remained secure. The telco stated that its services and business operations were unaffected throughout the incident and that affected customers would be notified via e-mail or letter as investigations continued with relevant authorities and third-party specialists.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

M1 Limited, a local telecommunications provider in Singapore, disclosed on November 6, 2026, that it had suffered a data breach on October 30, 2026. The breach compromised customer personal data including names, identity card details, dates of birth, mobile numbers, e-mail addresses, and addresses. The telco stated that payment card details, financial or banking information, and customer account access were not compromised. M1 confirmed that the breach has since been contained. Throughout the incident, the telco's services and business operations remained unaffected. The company indicated it would notify affected customers through e-mail or letter. M1 said it takes the security and confidentiality of information entrusted to it very seriously. The telco added that it has been working closely on ongoing investigations with relevant authorities and third-party specialists.

M1 encouraged customers to remain vigilant and exercise caution when responding to unsolicited calls, messages, or e-mails. Customers were advised to verify the identity of those who contact them through official channels. The disclosure did not specify the number of affected customers or the method by which the breach occurred. No further technical details about the intrusion vector or attacker identity were provided in the statement. The company's services continued without interruption during the period of the breach. Investigations into the incident were described as ongoing at the time of the announcement.

Sources

Sources available to members: 1 source.