MUIS Human Resource System Hit by Ransomware Attack

• •MUIS's SmartHRMS system was hit by a ransomware attack affecting payroll operations.
• •Sensitive staff data, including salaries and bank details, may have been compromised.
• •Recovery efforts are underway, with services expected to be restored by September 18.

The Islamic Religious Council of Singapore (MUIS) reported a ransomware attack on its human resource management system, SmartHRMS, operated by Avelogic. The incident, which occurred between August 30 and August 31, potentially compromised sensitive payroll information of staff at mosques and madrasahs, including salary and bank details. MUIS confirmed that the attack disrupted payroll processing but stated that public-facing services were not affected. Avelogic has engaged cybersecurity experts for forensic analysis and is working on recovery efforts, aiming to restore services by September 18. While no bulk data theft has been confirmed, the investigation is ongoing, and MUIS has not disclosed the number of affected individuals or whether a ransom was paid. A police report was filed, and the Personal Data Protection Commission was notified. Business continuity arrangements are in place to support essential HR functions during this incident.