Faith-Based Daily Awareness Post 16 September 2026

These updates are shared to help raise the situational awareness of Faith-Based organizations to best defend against and mitigate the impacts from all-hazards threats including physical security, cybersecurity, and natural disasters.

Singapore: Payroll system of mosques, madrasahs hit by ransomware; staff details potentially compromised

A ransomware attack on Avelogic’s SmartHRMS platform disrupted payroll operations for mosques and madrasahs overseen by the Islamic Religious Council of Singapore (MUIS), forcing staff to process salaries manually. The system is believed to have contained employees’ names, contact information, salaries, and bank account numbers, although the number of affected organizations and the extent of any compromise remain undisclosed. Avelogic said hackers encrypted its databases and backups, but the company’s latest investigation found no evidence of bulk data theft and confirmed that the most recent data set had been recovered. MUIS said public-facing and government services were unaffected and that continuity measures were supporting essential HR and payroll functions.

Analyst Comments: This incident demonstrates the concentration risk created when multiple faith-based organizations depend on one shared payroll provider. Encryption of both production data and backups turned a vendor compromise into an immediate operational problem, while the presence of payroll and banking information increases the potential for phishing, impersonation, and financial fraud even without confirmed bulk data theft. Faith-based organizations can reduce exposure through the following actions:

• Verify that payroll and HR vendors maintain isolated, immutable backups and routinely test restoration.
• Document a manual payroll process with defined responsibilities, secure employee-data handling, and reconciliation controls.
• Require multifactor authentication, timely vulnerability remediation, centralized logging, and incident-notification timelines in vendor agreements.
• Alert employees to phishing or payment-diversion attempts referencing payroll, salary, banking, or account-recovery information.
• Review third-party access and data-retention practices to limit the information exposed during a vendor compromise.

UK: Gang launches fireworks at London synagogue just after 700 people left service

A group of five suspected teenagers reportedly fired two fireworks toward Lauderdale Road Synagogue in west London shortly after approximately 700 people had departed a Rosh Hashanah service. No injuries were reported, but synagogue staff and nearby residents noted the daytime incident could have caused a fire. No arrests have been made.

The Community Security Trust is a UK-based charity that provides security and support to the British Jewish community, the CST is assisting the synagogue and police, while synagogue officials plan tighter security during significant dates on the Jewish calendar. The incident occurred amid heightened concern over antisemitism, with the Community Security Trust recording 1,926 antisemitic incidents nationwide in the first half of 2026, a 21 percent increase from the same period in 2025.

Analyst Comments: Using fireworks for harassment offers offenders an accessible, low-cost way to create loud blasts and fire hazards, and provoke rapid crowd movement with little warning. At a house of worship, the noise can resemble gunfire or an explosion, incite panic, and trigger unsafe evacuation behavior even when the device causes no direct injury. Houses of worship can prepare for this scenario through the following actions:

• Include fireworks and other sudden explosive sounds in emergency plans and staff briefings.
• Train staff and volunteers to assess the source, communicate clearly, and direct congregants away from windows or exterior gathering points.
• Establish evacuation, lockdown, and emergency-notification procedures appropriate to the facility.
• Maintain exterior lighting, functioning cameras, and rapid access to recorded footage.
• Coordinate reporting and response protocols with local law enforcement and fire services before major observances or high-attendance events.