Cybersecurity incident involving software vendor affected 48 mosques, no evidence large amount of data was taken: MUIS

Avelogic's HR and payroll system was hit by a cybersecurity incident that affected its clients, including 48 mosques, four madrasahs, the Islamic Learning Hub and Management Office (ILHAM), and Mosque-Madrasah-Wakaf Shared Services (MMWSS).

In a statement on Sep. 17, the Islamic Religious Council of Singapore (MUIS) said that a police report was made and no ransom was paid.

MUIS ensuring employees get their salaries on time

Concerned about the impact on affected organisations and their employees, MUIS said it is working with the institutions to ensure employees receive their salaries on time.

"Alternative payroll arrangements are already in place, and there has been no disruption to religious or public-facing services," added MUIS.

MUIS also said it will continue to support the affected community sector organisations to ensure essential HR and payroll functions continue without disruption.

No evidence large amount of data was taken from system

Meanwhile, Avelogic is continuing investigations and assessing the situation's wider impact.

It has since recovered the compromised data, and independent cybersecurity experts have been engaged to investigate the incident.

"Based on the investigation to date, there is no evidence that a large amount of data was taken from the system," the statement said.

It added that data stored in the affected system is also encrypted as an additional layer of protection.

"Investigations and security checks are ongoing, and the system will only resume operations after the relevant safeguards and checks have been completed."