Skip to content
Ransomware

Singapore City Development Company Limited (SINGCONS) listed by thegentlemen

Singapore City Development Company Limited (SINGCONS) has been listed on the leak site of the threat actor known as thegentlemen.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: thegentlemen
  • Country: Singapore
  • Sector: Manufacturing
  • Announcement date: November 24, 2025

Thegentlemen claims a data breach against SINGCONS

The threat actor known as thegentlemen has listed Singapore City Development Company Limited (SINGCONS) on their dedicated leak site. According to the announcement made by the group, they claim to have successfully compromised data belonging to the organization. This public listing was made through the group's own platform on November 24, 2025, marking a new incident involving the threat actor.

Ransomware groups often utilize leak sites to exert pressure on their victims. In many modern cyberattacks, threat actors employ a tactic known as double extortion. In this scenario, the attackers do not just encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information. The threat of releasing this stolen data on a public platform serves as additional leverage to coerce the victim into paying a ransom. By publishing the names of targeted organizations, these groups aim to damage the reputation of their targets and increase the likelihood of a payout.

Details regarding the alleged data leak

Despite the public announcement on the leak site, the threat group has not provided specific details regarding the nature of the alleged leaked data. There is no information available concerning the specific types of files that may have been taken, nor has any sample data been released to verify the claims. Furthermore, the group has not disclosed the total volume of data involved in this incident.

The listing currently provides no specific details or sample files regarding the nature of the alleged leaked data. A screenshot associated with the announcement simply displays a generic error message from the group's leak site, providing no further insight into the scope of the breach.

About Singapore City Development Company Limited (SINGCONS)

Singapore City Development Company Limited (SINGCONS) is a construction and real-estate development company based in Vietnam. The organization provides a wide range of comprehensive services within the industry. These services include land acquisition, master-planning, infrastructure development, and construction management for various types of projects, including residential, commercial, and mixed-use developments.

Potential implications and risks

Public information regarding the activities of the group known as thegentlemen remains limited. However, the claim of a data breach against an organization like SINGCONS may pose significant risks regarding the exposure of trade secrets and sensitive operational data. Because the entity is based in Singapore, any potential data breach may fall under the scope of the Singapore Personal Data Protection Act (PDPA), which governs how organizations must handle and protect personal data.

If the claims made by the threat actor are verified, the organization could face significant reputational damage, which may lead to a loss of trust among stakeholders. Additionally, there is a risk that any leaked data could be utilized by malicious actors for secondary attacks or targeted phishing campaigns against the company or its partners.

To defend against such threats, organizations in the manufacturing and construction sectors can implement various defensive measures. These include maintaining robust backup solutions, implementing multi-factor authentication across all systems, and conducting regular security awareness training for employees. Monitoring network traffic for unusual activity and ensuring that all software and systems are regularly patched are also critical components of a proactive cybersecurity posture. Organizations should also have a well-defined incident response plan to mitigate the impact of a potential breach and ensure compliance with local data protection regulations.

From the Professional plan

Phishing & Brand Protection

Monitor domains, phishing pages, ads and listings that impersonate your brand, and open takedown requests from the panel.

Related stories