How do I know if I am one of the 23,549 affected SIMBA customers?

SIMBA says it is notifying affected customers by email, progressively, and expects to finish within about a week of its 25 September 2026 notice. If you are a SIMBA customer and have not heard anything by early October, contact SIMBA directly through the support channels in the My SIMBA app or on simba.sg. Do not rely on links in an unexpected email or SMS to check; go to SIMBA's app or website yourself.

Was my credit card or bank account leaked in the SIMBA breach?

No, according to SIMBA. Its notice says no credit card or bank account information is at risk. The data involved was names, NRIC numbers, dates of birth, mobile numbers and email addresses. That mix is still useful to scammers, because a caller who can recite your NRIC and birth date sounds convincing, so be extra careful with anyone who contacts you claiming to be from SIMBA, a bank or a government agency.

What should I do if I get a suspicious call or message after the breach?

Hang up or do not reply, and do not click links or share one-time passwords. Verify by contacting the organisation through its official app, website or hotline that you look up yourself. If you think it is a scam, call the ScamShield helpline on 1799. If you have already shared banking details, call your bank immediately and make a police report.

SIMBA Data Breach: 23,549 Customers' NRIC Numbers and Birth Dates Exposed, What to Do Now

SIMBA Telecom says a data breach discovered on 24 September 2026 exposed the names, NRIC numbers, dates of birth, mobile numbers and email addresses of 23,549 customers. No card or bank details were involved, and affected customers are being emailed over the next week. Here is what was leaked, what was not, and how to protect yourself from follow-up scams.

SIMBA Telecom says a data breach exposed the personal details of 23,549 customers, including their NRIC numbers and dates of birth. The telco discovered the incident on 24 September 2026 and published a notice on its newsroom the next day. The story reached wider attention on 27 September.

> Quick view: breach discovered 24 Sep 2026 · 23,549 customers affected · names, NRIC numbers, birth dates, mobile numbers and emails leaked · no card or bank details at risk · SIMBA says it is resolved · affected customers emailed within about a week · report scams to 1799

What SIMBA said

According to SIMBA's official notice dated 25 September 2026:

The breach was discovered on 24 September 2026 and SIMBA says it has been "swiftly resolved".
Data involved: names, identity card numbers, dates of birth, mobile numbers and email addresses of 23,549 individual customers who had registered for SIMBA's services.
No credit card or bank account information is at risk.
There is no indication so far that any of the data has been maliciously misused.
SIMBA is working with the relevant authorities and reviewing its security measures.
Affected customers are being notified by email, progressively, with the process expected to finish within the next week.

SIMBA has not said how the breach happened or which customer groups (mobile, broadband, current or past subscribers) are in the affected set.

Why it matters even without card data

Your NRIC number, birth date and mobile number together are exactly what a scammer needs to sound legitimate. Expect the usual follow-ups after a leak like this: calls claiming to be from SIMBA "about the breach", fake refund or compensation offers, and impersonation of banks or government officers who can quote your details back to you.

What to do now

Watch your inbox, but verify. SIMBA says it will email affected customers. Read the notice, but do not click links asking you to log in, pay or "verify" your identity. Open the My SIMBA app or type simba.sg yourself instead.
Never share OTPs or banking logins, no matter how much of your personal data the caller already knows.
Be wary of "compensation" offers. SIMBA's notice mentions no compensation, so any message offering one should be treated as suspect until you confirm it through SIMBA's official channels.
Use a passkey or app-based login where you can, so a leaked NRIC and phone number is not enough to get into your accounts.
Report scams to the ScamShield helpline on 1799, and call your bank and make a police report straight away if you have already given out banking details.

If you are a SIMBA customer and have not received an email by early October but want to know whether you were affected, contact SIMBA through its official support channels.

Should you switch telco?

That is your call. One breach does not change SIMBA's plan prices, and no telco is immune. If you do want to compare, our telco guide below lays out the current SIM-only options side by side.

*Photo: SIMBA official notice, 25 September 2026 (simba.sg newsroom).*