Singtel allegedly hacked by Chinese group in global campaign

Breach discovered in June, seen as test run for further hacks on US telecom firms

Singtel, Singapore's largest mobile carrier, was breached by Chinese state-sponsored hackers this summer as part of a broader campaign against telecommunications companies and other critical infrastructure operators around the world, according to two people familiar with the matter.

The previously undisclosed breach was discovered in June, and investigators believe it was pulled off by a hacking group known as Volt Typhoon, according to the two people, who asked not to be identified to discuss a confidential investigation.

Officials in the United States, Australia, Canada, Britain and New Zealand - the "Five Eyes" intelligence-sharing alliance - warned earlier in 2024 that Volt Typhoon was embedding itself inside compromised IT networks to give China the ability to conduct disruptive cyber attacks in the event of a military conflict with the West.

The breach of Singtel, a carrier with operations throughout Southeast Asia and Australia, was seen as a test run by China for further hacks against US telecommunications companies, and information from the attack has provided clues about the expanding scope of suspected Chinese attacks against critical infrastructure abroad, including in the US, the people said.

In a joint statement on Nov 5, the Cyber Security Agency of Singapore (CSA) and Infocomm Media Development Authority (IMDA) said they understood from Singtel that no service was affected, and no data loss was reported from the incident.

They added that in this case, early detection and mitigation measures were in place.

"Based on current investigations, the threat has been dealt with and the overall telecommunications infrastructure remains secure and unaffected. CSA and IMDA will continue to work with organisations, especially key service providers including Singtel to strengthen the security and resilience of our digital infrastructure," they said.