Singapore Telecoms Cyberattack by UNC3886
Analysis based on 9 articles · First reported Feb 09, 2026 · Last updated Feb 09, 2026
The disclosure of cyberattacks on Singapore's major telecom companies by a 'China-nexus' group could lead to increased scrutiny on cybersecurity measures within the telecommunications industry globally. While no service disruptions or personal data breaches occurred for Singtel, StarHub, M1 (Singaporean company), and Simba Telecom, the exfiltration of technical data highlights ongoing espionage risks, potentially impacting investor confidence in the sector's resilience.
Singapore's Cyber Security Agency disclosed that four major telecom companies, Singtel, StarHub, M1 (Singaporean company), and Simba Telecom, were targeted by the cyber espionage group UNC3886 last year. The hackers successfully penetrated parts of their systems and exfiltrated a small amount of technical, network-related data. However, the attacks did not disrupt services or compromise personal data. Google===Mandiant, a cybersecurity firm owned by Google, identified UNC3886 as a 'China-nexus espionage group' known for targeting defense, technology, and telecommunications organizations in the United States and Asia. China routinely denies involvement in cyber espionage. This disclosure marks the first time the Singaporean government has revealed the specific infrastructure targeted by UNC3886, following previous statements about attacks on high-value strategic assets.
Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.
Open Dashboard