Technology1 min read

Data of 4,000 healthcare staff may have been compromised after cyberbreach of system used by AIC

By · Published by Everything Blog

In short

The unauthorized breach was uncovered on Nov 10, prompting officials to report the matter immediately to the police and the Cyber Security Agency of Singapore. The affected platform was temporarily taken offline, forcing facilitators to switch to physical forms until technical teams restored the system on Nov 12. Investigators confirmed no other systems were compromised during the security incident. The agency is now contacting potentially exposed personnel within three days to advise them against answering unsolicited messages or revealing passwords.

Key points

  • The breach was strictly confined to staff records, leaving patient care operations, clini…: The breach was strictly confined to staff records, leaving patient care operations, clinical data, and medical records entirely uncompromised.
  • Affected healthcare staff are being alerted within three days and cautioned against discl…: Affected healthcare staff are being alerted within three days and cautioned against disclosing passwords or responding to unsolicited messages.
  • The Agency for Integrated Care is actively working with cybersecurity officials and polic…: The Agency for Integrated Care is actively working with cybersecurity officials and police to investigate the incident and reinforce system defenses.

Sources checked by our analysis pipeline: 1

SINGAPORE – Personal data of more than 4,000 staff of public healthcare institutions and community care providers may have been compromised in a cybersecurity incident involving a system used by the Agency for Integrated Care (AIC).

It is the latest healthcare-related organisation to be hit by data breaches in recent weeks.

The Ministry of Health said in a statement on Nov 12 that these breaches have not affected patient care operations.

In a statement on Nov 12, AIC said that on Nov 10, it detected that its Advance Care Planning (ACP) information technology system was accessed by an unauthorised third party.

Data such as names, contact numbers, e-mail addresses and NRIC numbers of up to 4,064 staff of public healthcare institutions and community care providers may have been accessed as a result of the cyberbreach, it said.

To date, there are no indications that medical records or patient data have been compromised, AIC said, adding that no other systems have been affected.

The agency said that investigations are ongoing.

The ACP IT system is used by ACP facilitators to help…

Technology