No evidence large amount of data compromised from HR system hit by ransomware, says MUIS

MUIS said that software vendor Avelogic, which supplies the system, “has since recovered the affected data”.

PHOTO: LIANHE ZAOBAO

Published Sep 17, 2026, 07:00 PM

Updated Sep 17, 2026, 07:00 PM

MUIS confirmed no large-scale data theft occurred after a ransomware attack on the SmartHRMS payroll system used by mosques and madrasahs.

Affected institutions include 48 mosques, four madrasahs, and related offices; a police report was filed with no ransom paid.

Operations will resume after safety checks; alternative payroll methods ensure no salary delays or service disruptions, with ongoing support from MUIS and cybersecurity agencies.

SINGAPORE – Investigations into the hacking of a payroll system used by mosques and madrasahs here currently show no evidence that hackers had extracted a large amount of data, the Islamic Religious Council of Singapore (MUIS) said on Sept 17.

In a media statement, MUIS said that Singapore-based software vendor Avelogic, which supplies the SmartHRMS HR system , “has since recovered the affected data and engaged independent cybersecurity experts to investigate the incident”.

“Based on the investigation to date, there is no evidence that a large amount of data was taken from the system. Data stored in the affected system is also encrypted as an additional layer of protection,” it added .

The Straits Times previously reported that the compromised system is believed to have contained sensitive information of staff working at mosques and madrasahs, including their names, contact details, salaries and bank account numbers.

A cybersecurity incident notice on Avelogic’s website - last updated on Sept 14 - stated that threat actor activity was first detected on Aug 30 and 31. The company did not name the customers affected.

MUIS said on Sept 17 that those affected in the community sector include 48 mosques, four madrasahs, Islamic Learning Hub and Management Office (ILHAM) and Mosque-Madrasah-Wakaf Shared Services (MMWSS).

“A police report was made and no ransom was paid,” MUIS added.

It said the system will resume operations only after the relevant safeguards and checks have been completed.

MUIS is also working with the affected institutions to ensure that employees will continue to receive their salaries on time.

“Alternative payroll arrangements are already in place, and there has been no disruption to religious or public-facing services,” it said. “MUIS will continue to support the affected community sector organisations to ensure essential HR and payroll functions continue without disruption.”

The Cyber Security Agency of Singapore said on Sept 17 that it is aware of the incident and has reached out to MUIS to offer assistance.

新加坡伊斯兰宗教理事会（MUIS）表示，该系统的软件供应商 Avelogic“已经恢复了受影响的数据”。

图片来源：联合早报

发布于2026年9月17日晚上7点

更新于2026年9月17日晚上7点

新加坡伊斯兰宗教理事会 (MUIS) 证实，在清真寺和伊斯兰学校使用的 SmartHRMS 工资系统遭受勒索软件攻击后，没有发生大规模数据盗窃事件。

受影响的机构包括 48 座清真寺、4 所伊斯兰学校及相关办公室；警方已立案调查，但未支付赎金。

安全检查后将恢复运营；替代工资发放方式可确保不会出现工资延迟或服务中断，并得到新加坡伊斯兰宗教理事会和网络安全机构的持续支持。

新加坡——新加坡伊斯兰宗教理事会（MUIS）9月17日表示，目前对本地清真寺和伊斯兰学校使用的工资系统遭黑客攻击的调查显示，没有证据表明黑客已窃取大量数据。

新加坡伊斯兰宗教理事会（MUIS）在一份媒体声明中表示，提供 SmartHRMS 人力资源系统的新加坡软件供应商 Avelogic“已经恢复了受影响的数据，并聘请了独立的网络安全专家来调查这起事件”。

“根据目前的调查，没有证据表明大量数据从系统中被窃取。受影响系统中存储的数据也经过加密，作为额外的保护措施。”声明补充道。

《海峡时报》此前报道称，被入侵的系统据信包含清真寺和伊斯兰学校工作人员的敏感信息，包括他们的姓名、联系方式、工资和银行账号。

Avelogic 网站上发布的网络安全事件通知（上次更新时间为 9 月 14 日）称，威胁行为者的活动最早于 8 月 30 日和 31 日被检测到。该公司没有透露受影响的客户姓名。

9月17日，MUIS表示，受影响的社区部门包括48座清真寺、4所伊斯兰学校、伊斯兰学习中心和管理办公室（ILHAM）以及清真寺-伊斯兰学校-瓦卡夫共享服务（MMWSS）。

“我们已向警方报案，并未支付赎金，”伊斯兰宗教理事会补充道。

声明称，只有在完成相关安全保障措施和检查后，系统才会恢复运行。

新加坡伊斯兰宗教理事会（MUIS）也正与受影响的机构合作，以确保员工能够继续按时领取工资。

“替代薪资安排已经到位，宗教或面向公众的服务未受影响，”声明称。“新加坡伊斯兰宗教理事会（MUIS）将继续支持受影响的社区组织，确保必要的人力资源和薪资职能能够顺利进行。”

新加坡网络安全局于9月17日表示，他们已了解此事，并已联系新加坡伊斯兰宗教理事会（MUIS）提供协助。