sbws.org.sg Listed by safepay Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The listing of sbws.org.sg by the safepay ransomware group means that internal files from Singapore Buddhist Welfare Services may have been taken. Individuals who have received support, donated, or shared personal details with this voluntary welfare organisation now face the possibility that some of that information has left the organisation’s control, even though the number of people affected and the precise contents remain unknown.

Breaking down the breach

The incident was reported on 28 November 2025. Public information states only that sbws.org.sg appears on the safepay group’s listing and that internal files were exfiltrated during a ransomware attack. No figure has been released for the number of people affected, the volume of data involved, or the date on which the intrusion occurred. The organisation has not confirmed the listing or provided further details.

The group behind it: safepay

Safepay is a ransomware operation that typically gains access to networks, encrypts systems, and removes copies of files before demanding payment. The group maintains a public site where it lists organisations it claims to have compromised, a practice known as double extortion. In this case the group claims sbws.org.sg among its victims, though the organisation itself has not verified the claim.

sbws.org.sg and its sector

Singapore Buddhist Welfare Services is a long-standing voluntary welfare organisation that provides community-based support, including social services and assistance programmes. Organisations of this type routinely collect names, contact details, financial records for donations, and sensitive information related to the individuals and families they assist. A breach at such an entity can therefore touch people already in vulnerable circumstances.

What was likely exposed

The only detail released is that internal files were allegedly exfiltrated. The exact categories of data contained in those files have not been disclosed.

The real-world impact

People whose records appear in the exfiltrated files could see their contact information or financial details circulated. The organisation may face regulatory scrutiny and costs associated with investigation and system restoration. At present there is no public evidence of further distribution or misuse of the material.

What to do if you're exposed

Anyone who has dealt with Singapore Buddhist Welfare Services should treat unsolicited contact with extra caution and monitor their accounts for unusual activity.

• Change passwords on any accounts linked to the organisation and enable multi-factor authentication where available.
• Review bank and credit statements for transactions that do not match your own activity.
• Run a free exposure scan of your email address against known breach data to check whether your information has appeared elsewhere.

AICompiled with AI assistance from public sources and published under our editorial standards.