---
title: "Data breach at Islamic Religious Council of Singapore (MUIS)"
description: "SmartHRMS, the payroll and HR system used by dozens of mosques and madrasahs overseen by Singapore's Islamic Religious Council (MUIS), was hit by a ransomware attack detected on 30-31 August 2026. Software vendor Avelogic filed a police report and notified the Personal Data Protection Commission (PD"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-15-islamic-religious-council-of-singapore-muis
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-15
dateModified: 2026-09-15
---
# Islamic Religious Council of Singapore (MUIS)

Data breach — Critical

SmartHRMS, the payroll and HR system used by dozens of mosques and madrasahs overseen by Singapore's Islamic Religious Council (MUIS), was hit by a ransomware attack detected on 30-31 August 2026. Software vendor Avelogic filed a police report and notified the Personal Data Protection Commission (PDPC) in its capacity as a data intermediary. Potentially affected data includes staff names, contact details, salaries and bank account numbers; an independent forensic investigation found no evidence of bulk data exfiltration, with the most sensitive fields protected by application-layer encryption.

The exposed contact and banking details could be used for targeted phishing or payment-diversion fraud attempts against staff at the affected mosques and madrasahs.

| Fact | Value |
| --- | --- |
| Disclosed on | September 15, 2026 |
| Sector | Public sector |
| Country | Singapore |
| Cause | Third-party provider |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Phone number
- Employment data
- Banking data (IBAN, card)

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Payroll system of mosques, madrasahs hit by ransomware; staff details potentially compromised](https://databreaches.net/2026/09/15/payroll-system-of-mosques-madrasahs-hit-by-ransomware-staff-details-potentially-compromised/) — DataBreaches.net
- [Payroll system of mosques, madrasahs hit by ransomware; staff details potentially compromised](https://malware.news/t/payroll-system-of-mosques-madrasahs-hit-by-ransomware-staff-details-potentially-compromised/125613) — Malware News
- [Payroll system of mosques, madrasahs hit by ransomware; staff details potentially compromised](https://hacknotice.com/2026/09/16/payroll-system-of-mosques-madrasahs-hit-by-ransomware-staff-details-potentially-compromised/) — HackNotice
- [Payroll System Used by Singapore Mosques and Madrasahs Hit by Ransomware; Staff Data Potentially Compromised](https://goodyfeed.com/payroll-system-used-by-singapore-mosques-and-madrasahs-hit-by-ransomware-staff-data-potentially-compromised/) — Goody Feed
- [MUIS says human resource management system hit by cybersecurity incident](https://www.redhot.sg/muis-says-human-resource-management-system-hit-by-cybersecurity-incident-717279.html) — Red Hot Singapore
- [MUIS says human resource management system hit by cybersecurity incident](https://sg.headtopics.com/news/muis-says-human-resource-management-system-hit-by-87767268) — Head Topics (relais The Straits Times)

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-15-islamic-religious-council-of-singapore-muis
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees