Recent data breaches do not appear to be part of coordinated campaigns targeting Singapore: CSA

Oct 24: Alliance Medinet

Personal data of about 110,000 members was compromised after unauthorised access to its membership database, including names, identification numbers and contact details. Bank details of seven members and one member’s medical diagnosis might also have been affected. Nearly 4,400 customers of HSBC Life, Income Insurance and Singlife were affected or potentially affected.

Nov 6: Doctor Anywhere

Users’ personal data was leaked in a cyber incident involving an unknown third party. Doctor Anywhere, which became aware of the breach on Oct 29, did not disclose how many users or what data were affected, but said clinical records were not compromised.

Nov 9: Fullerton Health

A server supporting its Migrant Worker Primary Care Plan programme was accessed without authorisation. Fullerton Health did not disclose how many workers were affected, but said names, FIN numbers, dates of birth and contact details may have been exposed, while health, medical and financial information were not affected.

Nov 11: Dementia Singapore’s CARA SG app

Some CARA SG members’ personal data may have been compromised after a cyber incident that saw unauthorised app notifications being sent on Nov 1. Names, email addresses, phone numbers and membership IDs may have been affected, but no NRIC numbers were compromised.

Nov 11: Minmed Group

A standalone system supporting Minmed’s teleconsultation and health screening services was hit by a “malicious cybersecurity incident”. The group did not disclose the number of people or types of personal data affected, but said clinical records were not compromised.

Nov 12: Agency for Integrated Care (AIC)

An unauthorised third party accessed AIC’s Advance Care Planning IT system, potentially compromising the personal data of up to 4,064 staff members from public healthcare institutions and community care providers. Names, contact details and NRIC numbers may have been affected, but no indications were found that medical records or patient data had been compromised.