A cyberattack on the Singapore-based Global Schools Foundation is under investigation by Singapore's Personal Data Protection Commission (PDPC), following reports that 4.8TB of sensitive data was stolen. The breach reportedly exposed students' personal information, including addresses and passport numbers, as well as internal staff-parent email correspondence and salary records. The Cyber Security Agency of Singapore (CSA) confirmed that its Singapore Cyber Emergency Response Team (SingCERT) contacted Global Schools on Jun 15 to assist with securing its systems. The Personal Data Protection Commission announced its investigation on Jun 17, the same day a spokesperson for Global Schools Group acknowledged the incident, stating it had been "promptly addressed" with external specialists and that affected systems were restored. The group said it had contained the breach and notified relevant authorities but did not confirm or deny claims by the hacking group FulcrumSec about the extent of the data accessed. Cybersecurity websites BreachNews and DataBreaches.net first reported the incident on Jun 11. FulcrumSec, which emerged in September 2025 according to firm Moxfive, has claimed responsibility for attacks on over 20 organisations, including Novo Nordisk, LexisNexis and Arup Group. The group claimed it hacked Novo Nordisk and attempted to sell data after demanding US$25 million. Global Schools Group operates 64 campuses across 12 school brands in countries including South Korea, the UK, the Philippines and Singapore. One of its institutions is the Global Indian International School in Punggol, Singapore, which enrolls over 4,000 students.
Global Schools Group said it contained the breach and restored systems, but offered no response to specific claims about passport data and salary records being stolen. The delay between the breach's first public report on Jun 11 and the group's Jun 17 statement raises questions about transparency. A hacking group with a record of high-profile attacks now holds data from a network spanning multiple countries. The foundation's global footprint magnifies the risk beyond Singapore's borders.
Editorial note: AI-assisted opinion, not established fact. Full disclaimer →
