Minmed Cybersecurity Incident Hits Teleconsultation and Screening System, Clinical Records Not Affected

Singapore healthcare group Minmed said on 11 November that a system behind its teleconsultation and health-screening services was hit by "a malicious cybersecurity incident". Its statement says "Clinical records have not been affected by this incident". Minmed hasn't said what data, if any, was taken, how many customers are involved or when the intrusion was found.

What Minmed has disclosed

The group told The Straits Times the attack "appears to be limited to a specific standalone system", and that it brought in Ensign InfoSecurity for a forensic investigation. AsiaOne reports that as of 5 November Ensign had validated the security fixes.

It has reported the incident to the Personal Data Protection Commission and made a police report. Its healthcare services and clinics remain operational. Minmed says it can't give "further details about the incident as investigations are ongoing".

Third healthcare provider in a week

AsiaOne counts Minmed as the third healthcare provider in Singapore hit in seven days. On 6 November Doctor Anywhere disclosed that an unknown third party had accessed users' personal data, a breach the telehealth firm learned of on 29 October. Fullerton Health posted a notice on 9 November about a server attack that exposed migrant workers' FIN numbers and home addresses, which it had become aware of on 31 October.

Ensign also handled Doctor Anywhere's case and had validated its fixes by 30 October.

Questions from customers

Minmed hasn't issued advice to customers so far. Those with questions can write to [email protected].