Hello 👋 get a brew on because these are the top emerging risks between October 8th, and 21st, 2026…
Review our report’s terminology here ↗
Our main risk this fortnight is…
1. Technological: Network Fault Stalls Singapore Hospitals
A technical issue affecting network connectivity disrupted services across Singapore’s public healthcare institutions from around 7.10am on 13 October. Affected services came back progressively from about 3pm, and everything was restored by 4.37pm.
National health technology agency Synapxe said there was no indication of a cyber incident. Most of the damage came early: CNA found most patients visiting between 2pm and 5.30pm saw limited impact, but mornings were significantly disrupted.
Patients faced longer waiting times and problems making payments. Signs warned of longer waits, self-service kiosks were covered with maintenance notices, and pharmacy waits at National University Hospital ran to around 60 minutes.
Staff improvised. At Singapore General Hospital, a meal service associate entered orders on hospital computers after iPad logins failed, and stickers identified visitors when gantries faltered. Tan Tock Seng visitors registered at counters.
There were smaller failures too: an appointment app that did not update, queue display screens that stopped working, a missed appointment reminder. One doctor called a patient in advance to warn her, a simple communication win.
Sources
You should be concerned if…
Hospitals, clinics and care providers: Payments, visitor access, meal orders and pharmacy queues all ran through connected systems. Without rehearsed manual fallbacks, a single network fault becomes hours of queues, frustrated patients and stretched clinical staff.
Organisations relying on a shared or centralised IT provider: All three public clusters, NHG Health, NUHS and SingHealth, were affected at once. When one provider supports many sites, a single fault reaches every site at the same time, leaving no unaffected location to absorb demand.
Facilities, security and visitor-management teams: Ward gantries and self-registration machines failed, forcing staff onto stickers and counters. Any site using automated access control needs a tested way to verify and track people when the system stops.
Customer-facing businesses built on kiosks and apps: Banks, retailers, transport operators and service centres increasingly route customers through self-service. When kiosks, queue screens and reminders fail together, a handful of staffed counters must suddenly absorb the full volume of demand.
Elderly patients, carers and people with chronic conditions: Longer pharmacy waits, missed reminders and payment problems weigh heaviest on those with regular appointments and medication needs, who are often least able to wait for hours or return another day.
These items are generic assumptions. We recommend considering your own unique risk landscape against your critical dependencies. If you don’t know what they are, get in touch.
Preventative actions
Write and drill downtime procedures for every front-line task
List each task that touches a screen, from billing and visitor registration to meal orders, and document its manual equivalent. Run unannounced quarterly downtime drills so staff practise the fallback rather than improvise it.
Stock offline kits at every point of service
Keep paper registration forms, pre-printed visitor stickers, manual receipt books and printed contact lists wherever staff work. Check kits during routine audits, and make sure every shift knows where they are stored.
Map dependencies beyond the obvious systems
Trace which services share the same network, including access gantries, kiosks, queue displays, payment terminals and mobile device logins. Rank them by impact on customers and safety, and agree a recovery order in advance.
Set a degraded mode for access control
Decide now whether gantries fail open or closed, who verifies visitors manually, and how visits are logged on paper, so security and safeguarding continue when automated registration and entry systems stop working.
Pre-script outage messages and call ahead
Prepare messages for signage, websites, apps and call centres. Identify customers with time-critical appointments and phone them before they travel, so they can reschedule or arrive prepared for longer waits and manual processes.
Plan alternative payment and deferred billing
Agree a policy for recording charges manually and settling later. Keep standalone card terminals where feasible, and train cashiers to issue provisional receipts that reconcile cleanly once systems return to normal operation.
2.Economic: Cebu Power Crisis Threatens Business
After months of power interruptions in Cebu, business leaders, civil society groups and citizens at the Cebu Energy Summit on 12 October called for transparency and reliable long-term solutions to the Visayas power crisis.
The national grid operator reported in September that more than 1,500 megawatts were unavailable due to forced plant outages and reduced capacity, even with electricity imports from Luzon flowing into the Visayas grid.
When supply falls short, power is temporarily cut in non-critical areas such as households to stop the grid collapsing. Based on its share of demand, Cebu carries 42% of the Visayas rotational cuts.
The Cebu Chamber of Commerce says many industries cannot switch to backup power. Construction equipment, pumps, lighting and site offices stop, causing delays, while small businesses absorb generator, fuel, repair and equipment-protection costs.
The chamber warns domestic and international clients are questioning Cebu’s ability to support their business, and that some firms may close next year. It is calling for clearer outage schedules and more reliable supply.
Sources
You should be concerned if…
Construction and project-based firms: When equipment, pumps, lighting and site offices lose power, work stops outright. Repeated stoppages push projects behind schedule, raise the risk of delay penalties and strain relationships with developers and clients.
Small and micro businesses: The governor noted that every outage means lost income for small businesses. Owners are also paying for generators, fuel, repairs and equipment protection, costs that thin margins may not survive into next year.
Hospitals and essential services: The governor stressed that reliable power is critical for hospitals and essential services. Facilities depending on generators during rotational cuts face fuel logistics, maintenance strain and risk if backup systems fail mid-outage.
Firms serving domestic and international clients: The chamber says clients are questioning whether Cebu can support their business. Companies that cannot demonstrate continuity risk losing contracts to competitors in locations with more reliable power, regardless of their own performance.
Households and consumers: Residential rates rose from ₱12.79 per kWh in January to ₱14.89 in September. Consumer groups at the summit focused on pricing, while environmental groups raised their position on coal’s role in future supply.
Preventative actions
Map power-dependent processes and runtime tolerance
List every process that stops without mains power, from machinery and pumps to payment terminals and servers. Record how long each can run on backup, and how long the business can tolerate it stopping.
Size backup power to critical loads
Match generator and battery capacity to the processes that matter most, not the whole site. Secure fuel supply agreements, keep reserve stock on site, and load-test units monthly under realistic conditions.
Protect equipment from surges and restoration spikes
Fit surge protectors, automatic voltage regulators and uninterruptible power supplies to sensitive equipment. Shut down machinery safely before scheduled cuts and stagger restarts to reduce damage and costly repairs when power returns.
Build operations around published outage schedules
Track the distribution utility’s rotational schedules daily and shift energy-intensive work, deliveries and customer appointments into supplied windows. Assign a named person to monitor updates and alert teams when timings change.
Keep clients informed with a continuity statement
Give key clients a written summary of your backup capacity, recovery times and escalation contacts. Notify them proactively of planned cuts so reliability concerns are answered before they become reasons to move work elsewhere.
Review contracts for outage exposure
Check delivery and construction contracts for delay penalties and force majeure wording covering grid outages. Build realistic power-related buffers into new project timelines and quotes, and document every outage-related stoppage for claims.
Risk Flow Graph
Using the data from our flagship AI powered threat intelligence tool*, we can see trends of events per threat category over time. This fortnight, the biggest increase in risks concerns (1) Economic; 103 stories, (2) Geopolitical; 102 stories, (3) Technological; 90 stories, (4) Environmental; 38 stories, (5) Societal; 29 stories.
Quick snippet stories
Cyberattack Spoils Stock at French Supermarkets
A cyberattack warmed refrigerators in hundreds of French supermarkets, including at least 300 Intermarché and Netto stores, forcing them to discard all fresh and frozen stock. Danfoss said most affected equipment was legacy kit without security updates, and Paris prosecutors are investigating. Inventory connected out-of-support equipment, restrict remote access, and plan manual stock protection.
Main link to resource ↗Haze Drains Malaysia’s Economy Daily
Experts estimate the haze is costing Malaysia RM20 million to RM50 million a day. Tourism and aviation are hardest hit, while poor visibility delays freight, stalls construction and suppresses retail footfall, and Johor fruit yields have halved. Staff absence adds hidden costs. Set air quality thresholds for outdoor work and plan for transport delays.
Main link to resource ↗Greenpeace Protest Pauses Woodside Gas Project
Four Greenpeace activists scaled a floating production unit at Woodside’s Scarborough gas project off Western Australia, pausing pre-commissioning. Greenpeace cited concerns over the proposed Browse project’s impact on Scott Reef; Woodside says no physical contact with the reef is expected. Remote, high-value sites can halt without warning, so build activism into security and continuity plans.
Main link to resource ↗Japan Convenes Emergency Cyber Meeting
Masaaki Taira, who heads the ruling party’s cybersecurity strategy headquarters, convened an emergency meeting after ransomware attacks and breaches surged, with AI accelerating threats. Japan logged 86 incidents in September, and one cloud provider attack reportedly hit 495 businesses within hours. Identify which providers your critical services depend on and plan for their failure.
Main link to resource ↗Network Fault Halves Italian Airspace Capacity
ENAV, Italy’s air traffic control authority, cut airspace capacity by up to 50% after transmission network anomalies, ruling out a cyberattack. Its backup satellite network kept services safe but could not manage all traffic, and the fault coincided with an easyJet strike. Test backups at realistic load and agree in advance which operations get priority.
Main link to resource ↗
More stories we’re following
Here are more threat updates we’re monitoring across the month listed for your convenience.
Denmark CPR register breach exposes 8.8 million records via weak IT vendor password Link ↗
AI agents from multiple providers accessed personal and confidential data at Indian organisations Link ↗
TFG London hit by cyber incident, several IT systems down, online orders delayed Link ↗
ASOS discloses customer data exposure after employee credentials obtained through social engineering Link ↗
Chilean copper mine strike exposes AI industry’s vulnerability to labour disputes Link ↗
Italian steelmaker Acciaierie d’Italia shuts Taranto plants after court rejects environmental compliance deadline appeals Link ↗
Want to discuss how these risks might effect your business?
Book 30 minutes with us, free ↗
Need support?
At Fixinc, we are passionate about helping people get through disasters. That’s why our team of Advisors bring you this resource free of charge. If you need help understanding these threats and building a plan against them, the same Advisors are here to help over a 30-minute online call. Once complete, if you like what was provided, you can choose to provide a donation or subscribe to Unbreakable Ventures to support this channel.
