Boustead Singapore’s 18 September 2026 Singapore Exchange announcement disclosed a cybersecurity incident at one of the group’s overseas business units. The unit activated continuity measures, brought in external specialists and isolated affected systems; later reporting said its critical systems and business data were recovered, with no material disruption to the unit or significant impact on the wider group.
15
9
6
What the company said it did
After becoming aware of the incident, the business unit immediately activated its business continuity procedures and engaged external cyber incident response specialists, legal advisers and restoration providers. It also took containment measures, including shutting down and isolating affected systems.
15
The available reporting says the unit completed an investigation and made relevant notifications to Singapore’s Personal Data Protection Commission and authorities in affected jurisdictions.
9
Recovery and operational impact
The unit’s critical systems and business data were fully recovered from backups. Boustead said there was no material disruption to the affected unit’s business or its other units; the group also reported no significant and material impact on its business operations.
9
6
What remains undisclosed
The available reporting does not identify the affected business unit, specify the type of incident or say what records, if any, were affected.
2 The company’s disclosure therefore outlines its response and recovery, but does not provide enough information to assess the incident’s technical details or determine what information may have been involved.
Boustead also planned an independent cybersecurity review. The available report confirms the review, but does not detail its scope.
13