Authorities Investigate Cyberattack on Singapore-Based Global Schools Foundation

Singaporean authorities are investigating a significant cyberattack targeting the Global Schools Foundation, an organization that manages private schools worldwide through its Global Schools Group. The Personal Data Protection Commission (PDPC), Singapore's primary data protection regulator, confirmed its investigation into the incident on Wednesday, June 17.

The Cyber Security Agency of Singapore (CSA) had previously reached out to Global Schools on June 15, offering guidance on server security. Cybersecurity news outlets reported the breach earlier in June, detailing that personal information such as student addresses and passport numbers, along with staff email correspondence and salary records, may have been accessed. Reports suggest approximately 4.8 terabytes of data were stolen.

Ransomware group FulcrumSec has been linked to the attack. The group, which emerged in September 2025, has reportedly claimed responsibility for over 20 victims, including notable companies like Australian fintech firm youX and engineering consultancy Arup Group. FulcrumSec recently claimed to have hacked pharmaceutical giant Novo Nordisk, reportedly seeking $25 million for data related to the diabetes drug Ozempic.

A spokesperson for Global Schools Group acknowledged the cybersecurity incident on June 17, stating that it was "promptly addressed" with external assistance. The affected systems have been restored, and relevant authorities have been notified. While the group asserted the incident was "contained," they did not directly confirm FulcrumSec's specific claims regarding the extent of the data breach. The Global Schools Group operates 12 school brands across 64 campuses globally, including in South Korea, the UK, and the Philippines.

“

We take all such incidents seriously and the security and privacy of our students, parents, staff, and stakeholders remain our highest priority.