Technology1 min read

Minmed reports 'malicious cybersecurity incident' involving teleconsult, health screening system

By · Published by Everything Blog

In short

The breach was confined strictly to an isolated standalone platform, ensuring that patient clinical records avoided compromise while clinic operations continued without interruption. Ensign InfoSecurity investigated the intrusion and confirmed that all identified system vulnerabilities were fully secured by Nov. 5. Authorities, including the police and the Personal Data Protection Commission, have been notified as official inquiries proceed. This occurrence follows closely behind separate cybersecurity incidents recently reported by Fullerton Health and Doctor Anywhere.

Key points

  • Clinical records were not affected by the breach and all Minmed clinics remain operationa…: Clinical records were not affected by the breach and all Minmed clinics remain operational.
  • Minmed is unable to provide additional operational details while formal law enforcement a…: Minmed is unable to provide additional operational details while formal law enforcement and regulatory inquiries continue.
  • This event marks the third cyberattack disclosed by a healthcare provider in the past wee…: This event marks the third cyberattack disclosed by a healthcare provider in the past week, following Fullerton Health and Doctor Anywhere.

Sources checked by our analysis pipeline: 1

This is the third cybersecurity incident reported by a healthcare provider in the past week, after Fullerton Health and Doctor Anywhere also disclosed cyberattacks.

SINGAPORE: A system supporting Minmed Group’s teleconsultation and health screening services was affected by a "malicious cybersecurity incident", the healthcare provider said on Wednesday (Nov 11).

“Based on our investigations to date, the incident appears to be limited to a specific standalone system supporting our teleconsultation and health screening business,” Minmed said.

It added that clinical records were not affected by this incident

“Upon discovery of the malicious threat, we acted immediately to contain the incident,” the group said, adding that it engaged Ensign InfoSecurity to support a formal investigation and strengthen its systems.

Minmed said it had taken steps to address the identified vulnerabilities and would continue working with Ensign InfoSecurity to monitor and strengthen its cybersecurity measures.

As of Nov 5, Ensign InfoSecurity had independently validated the security fixes deployed and confirmed that the identified vulnerabilities in Minmed’s system have been secured.

Minmed said it had reported the incident to the Personal Data Protection…

Technology