A subsidiary of Singapore-listed Alliance Healthcare has suffered a cybersecurity incident involving unauthorised access to a system containing a membership database. The personal data of an estimated 110,000 members is believed to have been leaked by a third party.
In a filing with the Singapore Exchange on Saturday (24 October), the company said its subsidiary Alliance Medinet had suffered a cybersecurity incident and investigations were ongoing.
The company said: “Based on investigations conducted to date, the personal data of approximately 110,000 members in the membership database has been leaked by a third party. The types of personal data potentially affected include names, Identity Card numbers and contact information.”
Based on the company’s preliminary assessment, the bank account details of seven members in the database may also have been leaked, along with medical diagnosis information relating to one member.
Upon discovering the incident, the company’s team took immediate action to contain it and engaged independent cybersecurity and forensic experts to assist with a formal investigation and further strengthen its IT systems, processes and security monitoring. The company also deployed round-the-clock network and dark web monitoring systems.
The company reported the incident to the Personal Data Protection Commission (PDPC) on 21 October.
Medinet, its partners and the relevant clients are in the process of notifying affected members. The company and Medinet also expressed their sincere apologies for the inconvenience caused.
Alliance Healthcare said: “Protecting the information entrusted to us is a responsibility we take very seriously, and we remain committed to working closely with all parties to resolve this matter. The company will provide a more comprehensive update in due course and keep shareholders informed of any material developments.”
It also stressed that the group’s other businesses were unaffected by the incident.
