Summary
- Environment: Dividend-payment email and bank-transfer workflow
- Operational impact: Dividend delayed; subsequently paid by the end of February 2026
- Financial impact: Approximately SGD1 million loss, reported as about USD0.8 million
- Record status: Developing record. Reviewed October 20, 2026; updated as evidence emerges.
What happened
JE Cleantech discovered dividend-payment fraud on February 7, 2026. A fraudulent email impersonating The Depository Trust Company supplied false wire instructions, according to the company’s October 20 filing. [1]
Impact
The intended funds did not reach DTC, delaying payment to shareholders who held shares through intermediaries. JE Cleantech reported a loss of approximately SGD1 million, or approximately USD0.8 million. It said the dividend was subsequently paid by the end of February. That repayment does not establish recovery of the diverted funds. [1]
Timeline
Threat Group & Attack Vector
The email used impersonation and false payment instructions. The filing does not establish a compromised mailbox at either company. [1]
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
JE Cleantech informed US and Singapore authorities and the relevant banks, and reviewed the incident with its IT security team. It reported no significant effect on wider operations while the investigation continued. [1]