The Cyber Security Agency of Singapore (CSA) and the Monetary Authority of Singapore (MAS) issued a joint statement regarding a ransomware attack on printing vendor Toppan Next Tech [1]. Authorities noted that the vendor incident affected processing operations related to customer data such as bank statements [2]. Affected institutions and data scope are subject to the official CSA and MAS statements [2].
Backfill: this event became public on Apr 7, 2025 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillOfficially confirmed
Singapore's CSA and MAS Issue Joint Statement on Toppan Next Tech Ransomware Attack
1 min read
- Disclosed
- Apr 7, 2025
- Occurred
- Apr 1, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Finance, Professional services
What to do nowOur advice
Affected institutions and data scope are subject to the official CSA and MAS statements [2].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
CSA and MAS issued a joint statement in April 2025 regarding the Toppan Next Tech attack. Institutions such as DBS subsequently issued their own statements; this entry is based on the regulators' joint release [1].
Source excerpt: "1 The Cyber Security Agency of Singapore (CSA) and the Monetary Authority of Singapore (MAS) are aware of a ransomware attack reported by Toppan Next Tech (TNT) to the Personal Data Protection Commission on the evening of 6 April 2025." [1].
Source excerpt: "Singapore, 7 April 2025…The Cyber Security Agency of Singapore (CSA) and the Monetary Authority of Singapore (MAS) are aware of a ransomware attack reported by Toppan Next Tech (TNT) to the Personal Data Protection Commission on the evening of 6 April 2025." [2].
References
Official / primary2
- [1]
“1 The Cyber Security Agency of Singapore (CSA) and the Monetary Authority of Singapore (MAS) are aware of a ransomware attack reported by Toppan Next Tech (TNT) to the Personal Data Protection Commission on the evening of 6 April 2025.”
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.