Swire Pacific Offshore (SPO), a leading marine services provider headquartered in Singapore, suffered a ransomware attack last week that involved unauthorized access to the provider’s IT systems and resulted in data compromise. In their statement to BleepingComputer linked below, SPO did not unveil the exact information that was compromised but did state that “the unauthorized access has resulted in the loss of some confidential proprietary commercial information and has resulted in the loss of some personal data”. However, the Clop ransomware group posted screenshots of SPO’s data on their leak site, in turn taking responsibility for the attack, that indicated that passports, ID numbers, email addresses, payroll information, back account details, and internal messages were exfiltrated. The number of impacted individuals has not been released by SPO, but BleepingComputer estimates that approximately 2,500 individuals could be affected. CTAPT analysts will continue to monitor this data breach and will update as new information is released.