SINGAPORE: Authorities are looking into a cyberattack on the Singapore-based Global Schools Foundation, which operates private schools through Global Schools Group in multiple countries, including Singapore.
The Personal Data Protection Commission (PDPC), Singapore’s main data protection regulator, told CNA on Wednesday (Jun 17) that it is investigating the case.
In addition, the Cyber Security Agency of Singapore (CSA) said on Jun 15 that its Singapore Cyber Emergency Response Team (SingCERT) had reached out to Global Schools to offer advice on securing its servers.
Cybersecurity news websites BreachNews and DataBreaches.net have reported on the matter – with the first article appearing on Jun 11 – saying that students’ personal information such as addresses and passport numbers was compromised in the incident, as well as email correspondence between staff and parents and salary records. Around 4.8TB of data was stolen, according to reports.
According to cybersecurity firm Moxfive, FulcrumSec emerged in September 2025. Ransomware tracking sites have attributed more than 20 victims to the group, including Australian fintech firm youX, legal information provider LexisNexis, engineering consultancy Arup Group and environmental services company Interzero.
The group claimed this week that it had hacked pharmaceutical giant Novo Nordisk and said it was exploring selling parts of the data after unsuccessfully demanding US$25 million from the Ozempic maker.
In a statement to CNA on Jun 17, a spokesperson for Global Schools Group said it had recently experienced a cybersecurity incident and was assessing its impact.
The spokesperson said the cyberattack had been “promptly addressed” with the support of external specialists, that the affected systems had been restored, and that relevant regulatory and law enforcement authorities had been notified.
The group added it had “contained” the incident but did not address FulcrumSec’s specific claims about the scope of the data breach or the types of data accessed.
“We take all such incidents seriously and the security and privacy of our students, parents, staff, and stakeholders remain our highest priority,” the group said.
According to its website, the Global Schools Group operates 12 school brands across 64 campuses worldwide, including in South Korea, the UK and the Philippines. Among them is Global Indian International School in Punggol, Singapore, which has more than 4,000 enrolled students.
Read the full article here

