Personal data of 110,000 members of healthcare services provider Alliance Medinet compromised

Published Oct 24, 2026, 11:56 PM

Updated Oct 24, 2026, 11:56 PM

SINGAPORE – The personal data of about 110,000 members of healthcare services provider Alliance Medinet has been compromised in what has been described as a cyber incident.

Personal data such as names, personal identification numbers and contact information are potentially affected, said its parent company Alliance Healthcare Group in a bourse filing on Oct 24.

The breach involved unauthorised access to Alliance Medinet’s system containing its membership database, the parent company said.

Based on its initial assessment, Alliance Healthcare Group said, seven members in the database might have their bank account information compromised, while a member’s medical diagnosis might have been breached.

Investigations are currently ongoing, Alliance Healthcare Group said, adding that the affected members are being notified by Medinet and/or its partners and relevant clients.

Income Insurance customers are among those affected. Medinet provides healthcare-related services to its policyholders.

In a statement on Oct 24, Income Insurance, which said it was informed of the incident on Oct 22, said one Income Insurance corporate account, involving about 70 people, was affected.

Based on investigations conducted to date, the types of personal data potentially affected included names, personal identification numbers, contact information such as mobile numbers, policy number and coverage start and end date, Income Insurance said.

Income Insurance said that upon being notified, it immediately activated its incident response processes and informed the authorities, adding that it has also taken the necessary steps to inform the affected policyholder and individuals.

There is currently no evidence that bank account information or medical information has been compromised, it added.

In the Oct 24 bourse filing, Alliance Healthcare Group said: “Upon discovery, the team acted immediately to contain the incident and engaged independent cybersecurity and forensic specialists to support a formal investigation and further strengthen our IT systems, processes and security controls.

“We have also put in place 24-hour network monitoring and dark web monitoring systems.”

The incident was reported to the Personal Data Protection Commission of Singapore on Oct 21, Alliance Healthcare Group said.

A fuller update will be provided in due course, Alliance Healthcare Group said, adding that the rest of the group is not affected by the incident.

“Protecting the information entrusted to us is a responsibility we take very seriously, and we remain committed to working closely with all parties to resolve the matter,” Alliance Healthcare Group said.

“The company and Medinet regret the inconvenience this incident has caused.”

Personal Data Protection Act

发布于 2026 年 10 月 24 日晚上 11:56

更新于2026年10月24日晚上11:56

新加坡——医疗服务提供商 Alliance Medinet 约 11 万名会员的个人数据在一次被描述为网络事件的事件中遭到泄露。

其母公司 Alliance Healthcare Group 在 10 月 24 日提交给证券交易所的文件中表示，姓名、个人识别号码和联系信息等个人数据可能会受到影响。

母公司表示，此次安全漏洞涉及未经授权访问 Alliance Medinet 的系统，该系统包含其会员数据库。

根据初步评估，Alliance Healthcare Group 表示，数据库中七名成员的银行账户信息可能已被泄露，而一名成员的医疗诊断信息可能已被泄露。

Alliance Healthcare Group表示，调查目前仍在进行中，并补充说，受影响的成员正在收到Medinet和/或其合作伙伴及相关客户的通知。

收入保险客户也受到影响。Medinet 为其保单持有人提供医疗保健相关服务。

Income Insurance 在 10 月 24 日的一份声明中表示，该公司于 10 月 22 日获悉了这起事件，并称一个 Income Insurance 企业账户（涉及约 70 人）受到了影响。

Income Insurance公司表示，根据迄今为止进行的调查，可能受影响的个人数据类型包括姓名、个人识别号码、联系信息（如手机号码）、保单号码以及保险生效和终止日期。

Income Insurance公司表示，接到通知后，立即启动了事件响应流程并通知了有关部门，并补充说，该公司还采取了必要措施通知受影响的投保人和相关人员。

声明还补充说，目前没有证据表明银行账户信息或医疗信息已被泄露。

在 10 月 24 日提交给证券交易所的文件中，Alliance Healthcare Group 表示：“发现问题后，团队立即采取行动控制事态发展，并聘请独立的网络安全和取证专家支持正式调查，进一步加强我们的 IT 系统、流程和安全控制。

“我们还部署了24小时网络监控和暗网监控系统。”

Alliance Healthcare Group表示，该事件已于10月21日上报新加坡个人数据保护委员会。

Alliance Healthcare Group表示，将在适当时候提供更全面的最新消息，并补充说，该集团的其他成员并未受到此次事件的影响。

“保护委托给我们的信息是我们非常重视的责任，我们将继续与各方密切合作，解决此事，”Alliance Healthcare Group表示。

“公司和Medinet对此次事件造成的不便深表歉意。”

个人数据保护法