SINGAPORE – About 140,000 work pass holder records were compromised in a recent cybersecurity incident involving a Fullerton Health portal, though no health, medical or personal financial information was affected.
The breach involved unauthorised access to a standalone server supporting the healthcare provider’s Migrant Worker Primary Care Plan (PCP) programme, with data such as full names, foreign identification numbers, dates of birth, mobile numbers, e-mail addresses and residential addresses potentially exposed.
Of the compromised records, about 43,000 belonged to individuals whose work passes are no longer valid, Fullerton Health Group (FHG) and the Ministry of Manpower (MOM) said in separate statements on Nov 14.
FHG, one of four anchor operators appointed by MOM to administer the PCP for migrant workers, notified the ministry of the breach on Nov 2, and alerted the public to the incident on Nov 9.
The healthcare service provider said then that it became aware of the cyber incident on Oct 31.
In a reply to queries from The Straits Times, FHG said on Nov 14 that it promptly isolated the affected standalone server and implemented networkwide security measures upon discovering the breach.
As part of remediation efforts, the group is building an entirely new server from scratch with security measures embedded from the outset to host a new PCP enrolment portal.
“This approach ensures that the compromised server will not be used,” FHG said.
“We will continue to monitor the threat landscape for continuous improvement to our security posture,” it added.
Both FHG and MOM stressed that the incident has not disrupted migrant workers’ access to the PCP, and they can continue to seek medical care as usual.
The PCP is intended to provide eligible workers in Singapore with accessible and affordable healthcare.
Read Full Article At Source
