Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
Press Releases

Cyber Incidents Remain Widespread: New Helpline Launched to Support Organisations

14 October 2026

The Cyber Security Agency of Singapore urges organisations to take steps to improve their cyber resilience.

[Singapore, 14 October 2026] The Cyber Security Agency of Singapore (CSA) released the Singapore Cybersecurity Health Report 2025 today at the Singapore International Cyber Week (SICW) 2026. The report found that cyber incidents remain widespread, with almost nine in 10 organisations surveyed reporting at least one incident in 2025. While the proportion of organisations reporting certain business impacts has declined, gaps remain in the adoption of essential cybersecurity measures. To help organisations strengthen their cyber resilience, a new Cyber Incident Helpline was launched today by Senior Minister of State for Digital Development and Information Mr Tan Kiat How.

Singapore Cybersecurity Health Report 2025

2.           The report surveyed 2,005 businesses and non-profit organisations (NPOs) of varying sizes between October and November 2025. It assessed their experiences with cyber incidents, business impacts, adoption of cybersecurity measures and challenges in strengthening their cybersecurity posture. The full report is available: Read the Singapore Cybersecurity Health Report 2025 [PDF, 666.54 KB] (opens in new tab).

Cyber incidents remain widespread, although reported business impacts have declined

3.           Almost nine in 10 of organisations reported having encountered at least one cybersecurity incident in 2025. Ransomware was the most commonly reported cyber incident among both businesses and NPOs, followed by compromised credentials and social engineering attacks, such as phishing and impersonation scams.

4.           Nevertheless, the proportion of organisations that reported business impacts across most categories was lower compared to the 2023 (opens in new tab) survey. The proportions of businesses reporting incident response costs, business disruption, and financial losses declined by 3.8, 3.1, and 2.7 percentage points respectively. NPOs reported larger declines in data loss (18.4 percentage points), business disruption (8.2 percentage points) and financial losses (7.4 percentage points).

5.           While these findings are encouraging, the continued prevalence of cyber incidents underscores the need for organisations to remain vigilant. Organisations must not only strengthen their defences to prevent cyber incidents, but also be prepared to respond and recover when incidents occur.

Room for improvement in adoption of essential cybersecurity measures

6.           Adoption of essential cybersecurity measures remained uneven across the five categories under CSA's Cyber Essentials mark, with adoption rates ranging from 71 percent to 80 percent. Measures relating to software and system updates saw the highest adoption rate (80 percent), while asset management and protection measures had the lowest (71 percent each). This underscores the importance of adopting essential cybersecurity measures comprehensively, as weaknesses in any one area can undermine an organisation’s overall cyber resilience.

7.           Organisations also continued to face practical challenges in strengthening their cybersecurity. Among business surveyed, 56 percent cited a lack of knowledge and experience, 46 percent perceived themselves as unlikely targets of cyber-attacks, and 37 percent cited insufficient manpower and resources. Similar challenges were reported by NPOs.

8.           These findings highlight the importance of making cybersecurity guidance and support more accessible, particularly for SMEs that may lack dedicated cybersecurity expertise. While organisations may face resource and capability constraints, practical steps can be taken to strengthen their basic cyber defences.

New Cyber Incident Helpline to help organisations respond and recover

9.           To provide organisations with practical assistance when cyber incidents occur, the Cyber Resilience Centre (CRC) has established a new Cyber Incident Helpline. The Helpline provides initial incident triage, advisory support and referrals to relevant service providers and resources, helping organisations understand the next steps to contain an incident and begin recovery. Organisations can contact the Cyber Incident Helpline at 6890 9555, or visit www.cyberresilience.sg (opens in new tab).

10.        The CRC was established by the Singapore Business Federation in 2025, in partnership with the Singapore Chinese Chamber of Commerce and Industry as well as SGTech, with CSA’s support. The CRC helps organisations, particularly SMEs, strengthen their cyber resilience through initiatives such as cybersecurity health clinics, workshops, and practical guidance. Its clinics and workshops have benefited close to 500 organisations to date, while another 300 organisations are expected to participate in a phishing simulation exercise. 

Organisations should take practical steps to strengthen cyber resilience

11.        Beyond responding to incidents, CSA encourages organisations to take proactive steps to strengthen their cyber resilience. Organisations can tap on a range of resources and support programmes to:

  • Learn – Organisations can access cybersecurity toolkits (opens in new tab) which provide useful guidance on cybersecurity issues for business owners, employees and their IT teams. They can also use CSA’s Cybersecurity Health Check (opens in new tab) tool to identify areas for improvement.

  • Plan – Organisations are encouraged to tap on CSA’s CISO-as-a-Service programme to engage professional consultants to create a tailored cybersecurity plan, with up to 70 percent co-funding available to eligible SMEs.

  • Protect – Organisations are strongly encouraged to implement essential cybersecurity measures under CSA’s Cyber Essentials framework to establish a baseline level of cyber protection.

  • Assure – As their operations grow and digital risks become more complex, organisations can progress towards CSA’s Cyber Trust Mark to strengthen their cybersecurity risk management.

12.        Cybersecurity is a shared responsibility. With cyber incidents remaining widespread, CSA encourages all organisations, regardless of size, to take action early, strengthen their cyber defences and be prepared to respond and recover from incidents.