DBS, Bank of China Customer Data at Risk After Vendor Ransomware Attack

Thousands of customers from Singapore's DBS Group and Bank of China may have had their personal data compromised following a ransomware attack on third-party vendor Toppan Next Tech.

Credit: DBS

DBS said on Monday that customer statements of about 8,200 clients were potentially affected. The bank confirmed that its internal systems were not breached and that all customer deposits and funds remain secure.

Bank of China reported that approximately 3,000 customers were impacted. The compromised data involved paper letters printed and distributed by Toppan, and included names, addresses and, in some cases, loan account numbers.

DBS was notified of the ransomware incident on April 5. Preliminary findings indicate that most of the affected data relates to DBS Vickers, the bank’s trading platform, while the remainder involves cashline loan accounts.

The exposed information includes customers’ first and last names, postal addresses, and details of equities held under DBS Vickers and cashline loans.

DBS said the potentially compromised statements and letters were primarily sent to individual customers between December 2024 and February 2025.

The Monetary Authority of Singapore stated it is in close engagement with the affected banks regarding their risk mitigation efforts and customer follow-ups.

The Cyber Security Agency of Singapore is assisting Toppan Next Tech in the ongoing investigation.

---

• Ransomware attack on Toppan Next Tech affected DBS and Bank of China customers

• About 8,200 DBS and 3,000 Bank of China clients potentially impacted

• Exposed data includes names, addresses and some loan account numbers

Source: REUTERS