SINGAPORE – The personal data of about 110,000 members of healthcare services provider Alliance Medinet has been compromised in what has been described as a cyber incident.
Personal data such as names, personal identification numbers and contact information are potentially affected, said its parent company Alliance Healthcare Group in a bourse filing on Oct 24.
The breach involved unauthorised access to Alliance Medinet’s system containing its membership database, the parent company said.
Based on its initial assessment, Alliance Healthcare Group said, seven members in the database might have their bank account information compromised, while a member’s medical diagnosis might have been breached.
Investigations are currently ongoing, Alliance Healthcare Group said, adding that the affected members are being notified by Medinet and/or its partners and relevant clients.
Income Insurance customers are among those affected. Medinet provides healthcare-related services to its policyholders.
In a statement on Oct 24, Income Insurance, which said it was informed of the incident on Oct 22, said one Income Insurance corporate account, involving about 70 people, was affected.
Based on investigations conducted to date, the types of personal data potentially affected included names, personal identification numbers, contact information such as mobile numbers, policy number and coverage start and end date, Income Insurance said.
Income Insurance said that upon being notified, it immediately activated its incident response processes and informed the authorities, adding that it has also taken the necessary steps to inform the affected policyholder and individuals.
There is currently no evidence that bank account information or medical information has been compromised, it added.
In the Oct 24 bourse filing, Alliance Healthcare Group said: “Upon discovery, the team acted immediately to contain the incident and engaged independent cybersecurity and forensic specialists to support a formal investigation and further strengthen our IT systems, processes and security controls.
“We have also put in place 24-hour network monitoring and dark web monitoring systems.”
The incident was reported to the Personal Data Protection Commission of Singapore on Oct 21, Alliance Healthcare Group said.
A fuller update will be provided in due course, Alliance Healthcare Group said, adding that the rest of the group is not affected by the incident.
“Protecting the information entrusted to us is a responsibility we take very seriously, and we remain committed to working closely with all parties to resolve the matter,” Alliance Healthcare Group said.
“The company and Medinet regret the inconvenience this incident has caused.”