HomeTeamNS Hit by Ransomware Attack Affecting Employee Data and Vehicle Information

A ransomware attack has struck the servers of HomeTeamNS.

HomeTeamNS is a non-profit organisation serving national servicemen from Singapore’s Police Force and Civil Defence Force. The incident, discovered on 25 Feb 2025, affected servers containing employee data and vehicle details of some members.

HomeTeamNS officials reported the cyber breach on 3 Mar 2025, stating that the compromised servers were promptly disabled and isolated from the organisation’s IT network.

“At this time, there is no evidence of data extraction, but we are monitoring closely,” HomeTeamNS said in a statement.

Scope of Affected Data

The affected servers housed information on current and former employees, as well as vehicle details of some members and affiliate members.

HomeTeamNS boasts a membership base exceeding 260,000 NSmen.

The organisation operates four clubhouses featuring sports and recreational facilities, along with food and beverage outlets.

Security Measures Implemented

In response to the attack, HomeTeamNS has implemented several security measures:

  1. Changing passwords for all administrative accounts

  2. Enhancing security scans and firewalls

  3. Engaging third-party cybersecurity experts for investigation

  4. Collaborating with authorities, including the police and Cyber Security Agency of Singapore

The organisation has reached out to affected individuals, offering guidance on protecting themselves from potential phishing attempts or unauthorised transactions.

Ransomware attacks typically involve cybercriminals using malicious software to encrypt files on servers and then demanding a sum of money to restore access.

HomeTeamNS emphasised its commitment to data protection, stating, “The protection of our stakeholders’ personal data is of utmost importance to HomeTeamNS”.

Ongoing Investigation

As investigations continue, the full extent of the attack and its impact on HomeTeamNS operations remains to be seen.

The organisation has yet to disclose information about any ransom demands or the exact number of individuals affected by the breach.