\n<\/p>\n
SINGAPORE: \u00a0A “preventable” lapse by a contracted service provider to complete a required security update led to the nine-and-a-half hour disruption to services across Singapore’s public healthcare clusters on Oct 13, Senior Minister of State for Health\u00a0Tan Kiat How told parliament on Tuesday (Nov 3).\u00a0<\/p>\n
About 4,000 outpatient appointments were rescheduled, and some patients experienced delays of up to two hours, Mr Tan said. “No adverse patient safety incidents were attributed to the disruption in this case.”<\/p>\n
The disruption impacted services across all three public healthcare clusters – NHG Health, the National University Health System (NUHS) and SingHealth.<\/p>\n
Services affected included appointment bookings, visitor registration, medication dispensing and billing.<\/p>\n
Healthcare institutions activated downtime procedures, with additional staff supporting operations and clinicians using selected read-only patient records and manual workflows to continue essential care, Mr Tan said.<\/p>\n
National health technology agency Synapxe had contracted a service provider to manage the necessary update, but it was not carried out, Mr Tan said.<\/p>\n
“Synapxe is reviewing the provider’s contractual obligations and will take appropriate action for any established lapses. Regardless of the outsourcing arrangement, Synapxe remains accountable for the resilience of its critical systems.”<\/p>\n
Mr Tan said the public healthcare systems have backup infrastructure, including two data centres, but both depended on the same underlying Domain Name System (DNS) service and security configuration.<\/p>\n
“Switching between them would therefore not have resolved this particular disruption,” he added. “Synapxe will review such shared dependencies and strengthen alternative recovery arrangements.”<\/p>\n
The required security update to a shared DNS was not completed before a scheduled global change, Mr Tan said, likening the DNS to an internet address book that helps systems locate and connect to applications. “This was a known change and a preventable lapse.”<\/p>\n
The disruption on Oct 13 caused inconvenience and concern to patients and their families, and created additional work for healthcare workers, he noted. “We apologise. It should not have happened.”\u00a0<\/p>\n
The investigation found that this was not a cyberattack, and there was no unauthorised access to, compromise or loss of patient data, Mr Tan added.<\/p>\n
Noting the duration of the disruption, he said monitoring detected abnormal activity, but it took time to identify the underlying problem and restore services safely. Synapxe is strengthening monitoring and fault diagnosis to enable faster recovery.<\/p>\n<\/div>\n
\n