Cloud growth brings cybersecurity risks for Singapore businesses

Organisations in Singapore are reporting a sharp rise in cyberattacks and cybersecurity concerns, according to new research from Rubrik Zero Labs.

In its latest report, The State of Data Security in 2025: A Distributed Crisis, Rubrik found that 91% of IT and security leaders experienced cyberattacks over the past year, highlighting growing concerns around hybrid cloud environments and data security.

The study points to the challenges created by rapid cloud adoption and increasingly complex IT infrastructures. As organisations move more sensitive information into hybrid cloud systems, attackers are broadening their tactics to exploit vulnerabilities across both cloud and on-premises environments.

“Organisations are operating in a more connected and complex landscape, which creates new opportunities but also new risks,” said Sheena Chin, managing director for ASEAN at Rubrik. “In Singapore’s advanced digital environment, businesses must strengthen their ability to safeguard critical data to keep pace with emerging threats.”

Cyberattacks are becoming more frequent and disruptive

The report notes that attacks have become a constant feature for many businesses:

• Nearly 20% of organisations in Singapore reported facing more than 25 cyberattacks in 2024 alone — averaging at least one attack every two weeks.
• Common attack vectors included malware infections (38%), phishing attempts (32%), insider threats (31%), breaches of cloud or SaaS environments (26%), and broader data breaches (23%).

The impact of these incidents was significant:

• 38% of organisations reported reputational harm and declining customer trust.
• 37% faced higher security costs.
• 33% said a cyberattack led to leadership changes at the executive level.

AI, cloud, and data complexity add to the security burden

The rise of AI and continued cloud adoption are also complicating data protection efforts. According to the survey, 92% of IT and security leaders in Singapore are managing hybrid cloud environments, with about half reporting that most of their workloads are now hosted in the cloud.

This shift has introduced several challenges:

• 42% listed data security in hybrid environments as their most significant challenge.
• 36% pointed to data privacy and compliance as a major concern.
• 34% highlighted a lack of centralised visibility and control over their environments.

Rubrik’s telemetry data also shows that 36% of sensitive files are classified as high-risk, including personally identifiable information (PII) like Social Security numbers, phone numbers, intellectual property, and source code.

Ransomware and identity-based threats continue to evolve

Ransomware attacks continue to be a major concern for organisations in Singapore.

• Among those hit by ransomware, 95% reported paying the ransom to recover their data.
• 75% said threat actors were able to partially compromise backup and recovery systems.
• 38% reported full compromise of their backup environments.

Identity threats are also rising alongside the spread of cloud services. The report found that 91% of organisations are using between two and five cloud or SaaS platforms, which is creating new vulnerabilities in identity and access management. Attackers are increasingly targeting these gaps in order to move laterally across systems and escalate attacks.

Insider threats, which are frequently linked to compromised credentials, were cited by 31% of IT leaders as a growing concern. Rubrik’s telemetry also revealed that 27% of high-risk sensitive files contain digital access data like API keys, usernames, and account numbers, which attackers frequently utilise to gain deeper access to systems.

A need for a data-first security approach

The findings suggest that organisations in Singapore are operating in a threat landscape where traditional perimeter-based defences are no longer enough. With hybrid environments becoming the norm and attackers adapting quickly, a shift toward securing critical data directly — regardless of where it resides — is increasingly necessary.

As cyber threats continue to evolve, organisations that proactively identify and protect sensitive information are more likely to maintain resilience and adapt to future risks.

Photo by Unsplash)

See also: CISA issues guidance amid unconfirmed Oracle Cloud breach

Want to learn more about cybersecurity and the cloud from industry leaders? Check out Cyber Security & Cloud Expo taking place in Amsterdam, California, and London.

Explore other upcoming enterprise technology events and webinars powered by TechForge here.