Singapore Alliance Medinet breach exposes data of about 110,000 members; nearly 4,400 insurance customers affected

Singapore-listed healthcare group Alliance Healthcare Group (SGX: MIJ) has disclosed that a third party gained unauthorised access to the membership database of its subsidiary Alliance Medinet, affecting the personal data of about 110,000 members. The incident was reported to Singapore's Personal Data Protection Commission on October 21 and disclosed to the Singapore Exchange on October 24.

What was exposed

The data involved includes names, identification numbers and contact details. The company's initial assessment also found that bank account information belonging to seven members and one member's medical diagnosis might have been compromised. The company uses the word 'might' for those cases; they are not confirmed exposures, a distinction worth keeping.

The group said the rest of the group was not affected by the incident. Affected members are being notified by Medinet, its partners and relevant clients.

Insurance customers caught up in the breach

Because Medinet provides services to several insurers, customers of HSBC Life, Singlife and Income Insurance are also affected, with nearly 4,400 customers affected or potentially affected across the three insurers. HSBC Life reported 2,614 individual policyholders and 1,381 group policy members affected; Income Insurance cited about 70 people under one corporate client; Singlife said 323 customers under its employee benefits group health insurance may have been affected.

HSBC Life added that its own systems were not breached and login credentials were not affected.

Investigation ongoing

The company has engaged independent cybersecurity and forensic specialists and introduced round-the-clock network and dark web monitoring. Singapore's Cyber Security Agency said it is monitoring developments closely. The investigation is ongoing and the financial impact has not yet been determined; further updates are expected.