Technology1 min read

Records of about 140,000 migrant workers exposed in Fullerton Health's recent data breach

By · Published by Everything Blog

In short

The cybersecurity breach specifically affected Fullerton Health's Migrant Worker Primary Care Plan programme, exposing personal information such as full names, foreign identification numbers, and residential addresses. In response, the healthcare group isolated the affected server and began developing a new, hardened system to run its enrolment portal. Authorities and employers also pushed native-language notifications through the Ministry of Manpower's FWMOMCare mobile application to caution impacted individuals.

Key points

  • Critical financial and medical data were not compromised during the unauthorized access i…: Critical financial and medical data were not compromised during the unauthorized access incident.
  • Impacted individuals received multi-channel warnings, including employer notices and nati…: Impacted individuals received multi-channel warnings, including employer notices and native-language alerts on the FWMOMCare application.
  • Fullerton Health is replacing the affected enrolment portal with an entirely new server f…: Fullerton Health is replacing the affected enrolment portal with an entirely new server featuring built-in security protections.

Sources checked by our analysis pipeline: 1

About 43,000 records belonged to individuals whose work passes were no longer valid, the healthcare provider said in response to CNA's queries.

SINGAPORE: About 140,000 work pass holder records were compromised in the cybersecurity incident involving Fullerton Health's Migrant Worker Primary Care Plan (PCP) programme that was first disclosed earlier this week, the healthcare provider said on Saturday (Nov 14).

Of those, about 43,000 records belonged to individuals whose work passes were no longer valid, Fullerton Health said in response to CNA queries.

“No health, medical or personal financial information was compromised in the incident,” it said.

Fullerton Health had said in a Nov 9 notice on its website that it became aware of the breach on Oct 31, without disclosing the number of workers affected at the time.

Preliminary investigations showed that migrant workers' full names, foreign identification numbers, dates of birth, mobile numbers, email addresses and residential addresses may have been affected.

Fullerton Health said in its latest response to CNA that its security monitoring provider, Logicalis, found no evidence of abnormalities or security breaches across the Fullerton…

Technology