Sembcorp Marine has addressed a major breach of its cyber security to prevent it spreading to other IT systems
Th Singapore specialist ship and offshore rig builder, converter and repairer reported the cyber incident and its resulting security response 31 August. It said this cyber attack involved an unauthorised party accessing part of its IT network via third-party software products.
During the cyber attack, employee data and non-critical information relating to Sembcorp’s operations was accessed. As soon as Sembcorp discovered the cyber incident, it brought in security experts to mitigate potential risks and improve defences.
Experts conducted detailed analytics to flush out all breaches and related root causes, assisted with impact assessment and review, and implemented enhanced security measures to further strengthen Sembcorp’s core IT infrastructure and systems.
“Based on investigations and impact assessment to-date by the company and its cyber-security experts, the incident and related risks have been effectively addressed,” said Sembcorp. “The company’s business operations remained unaffected throughout.”
Sembcorp notified the relevant authorities and is working closely with the regulators on this matter.
Its investigations established “certain personally identifiable information relating to some of its incoming, existing and former employees, as well as non-critical information relating to its operations were affected.”
Sembcorp said it contacted affected parties and was committed to helping them manage all possible risks and take appropriate follow-up actions.
“The company is mindful of the concerns of all affected parties and would like to assure all our stakeholders that information security and the privacy of all stakeholders are our top priorities,” said Sembcorp.
“This cyber-security incident is not expected to have any material impact on the consolidated net tangible assets or consolidated earnings per share of Sembcorp Marine for the current financial year.”
