
A recent ransomware attack on Toppan Next Tech (TNT), a Singapore-based third-party service provider, has potentially compromised sensitive customer information from DBS Group and the Bank of China (BoC).Â
The incident has exposed critical customer data, raising concerns about third-party cybersecurity vulnerabilities in the financial sector. DBS Group disclosed that approximately 8,200 customer statements could be at risk, according to a Reuters report.
Preliminary findings suggest that the breached data primarily relates to customer communications sent between December 2024 and February 2025 and that the impacted data pertains mainly to DBS Vickers, the bank’s trading platform, and certain cashline loan accounts.Â
The compromised information includes customer names, postal addresses, and, in some cases, details of equities held under DBS Vickers or linked to loan accounts. DBS received notification of the ransomware attack on April 5, 2025.Â
The Bank of China revealed that nearly 3,000 of its customers were affected by the attack. The exposed data, connected to paper letters printed and distributed by TNT, reportedly includes customer names, addresses, and in some cases, loan account numbers. Â
Both financial institutions emphasized that their internal banking systems remain uncompromised. DBS assured its clients that deposits and financial transactions remain safe. Â
The Monetary Authority of Singapore (MAS) stated it is closely monitoring the incident and evaluating the banks’ risk-mitigation measures. The Cyber Security Agency of Singapore (CSA) has also engaged with TNT to assist in the investigation of the breach. Â