AnswersPublished14 sources
Avelogic SmartHRMS ransomware incident: What happened to Singapore’s mosque payroll system
Ransomware affected Avelogic’s SmartHRMS system in late August 2026, including payroll services used by 48 Singapore mosques and four madrasahs. Attackers encrypted system databases and backups.
Published byEdited with GPT-6 SolImages generated with GPT Image 2
Research answer
Key takeaways
- Ransomware affected Avelogic’s SmartHRMS system in late August 2026, including payroll services used by 48 Singapore mosques and four madrasahs.
- Attackers encrypted system databases and backups. Avelogic later recovered the affected data, but recovery did not mean SmartHRMS had been cleared to resume operation.
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: What happened in the September 2026 cybersecurity incident involving Avelogic’s SmartHRMS human resources and payroll system, which Singapor. Article summary: Avelogic’s SmartHRMS HR and payroll system was hit by a ransomware-related cybersecurity incident involving activity reported on August 30–31, 2026; MUIS publicly detailed its impact in September. The disruption affected. Topic tags: general, general web. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, charts with fake numbers, clic
A ransomware attack on Avelogic’s SmartHRMS human resources and payroll system disrupted access for Singapore organisations that use it. The incident was detected on August 31, 2026, after attacker activity on August 30–31; the Islamic Religious Council of Singapore (MUIS) detailed the impact on its institutions in September.12
15
3
Which organisations were affected?
MUIS identified 48 mosques, four madrasahs, the Islamic Learning Hub and Management Office (ILHAM), and Mosque-Madrasah-Wakaf Shared Services (MMWSS) among the affected community-sector organisations. Avelogic also served affected clients in other sectors, which MUIS did not name.3
Was employee data stolen or encrypted?
The two encryption findings describe different things. The ransomware encrypted SmartHRMS databases and attached backups, disrupting access; Avelogic’s initial notice said there was no recovery point at that stage. Separately, Avelogic said core sensitive data fields already had application-layer encryption as a protective measure.15
12
An independent forensic investigation found no evidence of bulk data exfiltration in the available Amazon Web Services network telemetry covering confirmed attacker activity on August 30–31. MUIS likewise said investigations had found no evidence that a large amount of data was taken. Those findings do not establish that no data was accessed or taken, and the investigation was continuing.12
17
What did Avelogic and MUIS do next?
Avelogic said it isolated affected systems, revoked remote access and preserved forensic evidence. It engaged independent cybersecurity experts and subsequently recovered the affected data.15
17 Avelogic filed a police report on August 31 and notified Singapore’s Personal Data Protection Commission in its capacity as a data intermediary. MUIS said no ransom was paid.
12
3
MUIS put alternative payroll arrangements in place so affected mosque and madrasah employees would continue to receive salaries on time. It said religious and public-facing services were not disrupted.3 Data recovery was not the same as a safe return to service: investigations and security checks remained underway, and MUIS said SmartHRMS would resume only after the necessary safeguards and checks were completed.
3
17
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "Avelogic SmartHRMS ransomware incident: What happened to Singapore’s mosque payroll system"?
Ransomware affected Avelogic’s SmartHRMS system in late August 2026, including payroll services used by 48 Singapore mosques and four madrasahs.
What are the key points to validate first?
Ransomware affected Avelogic’s SmartHRMS system in late August 2026, including payroll services used by 48 Singapore mosques and four madrasahs. Attackers encrypted system databases and backups. Avelogic later recovered the affected data, but recovery did not mean SmartHRMS had been cleared to resume operation.