Personal data of 110,000 members compromised in Alliance Medinet cyber incident

Alliance Medinet provides services to several insurers, including HSBC Life, Singlife and Income Insurance, which have reported that their customers were affected by the incident.

A view of Alliance Medinet's logo displayed on a TV screen in this illustration. (Image: Alliance Medinet)

This audio is generated by an AI tool.

SINGAPORE: The personal data of about 110,000 members of healthcare services provider Alliance Medinet has been compromised in a cyber incident, with customers of insurers HSBC Life, Income Insurance and Singlife among those affected.

The three insurers said nearly 4,400 of their customers were affected or potentially affected by the incident, which involved unauthorised access to Alliance Medinet's membership database.

The potentially compromised information includes names, personal identification numbers and contact details, parent company Alliance Healthcare Group said in a bourse filing on Saturday (Oct 24).

Bank account information belonging to seven members and one member's medical diagnosis might also have been compromised, it added.

CNA Games Guess Word Crack the word, one row at a time Buzzword Create words using the given letters Mini Sudoku Tiny puzzle, mighty brain teaser Mini Crossword Small grid, big challenge Word Search Spot as many words as you can Show More Show Less Alliance Medinet is the corporate healthcare arm of Alliance Healthcare Group, specialising in managed healthcare services and third-party administration services. The group said affected members were in the process of being notified by Alliance Medinet, its partners or relevant clients. In response to CNA's queries, the Cyber Security Agency of Singapore said it was aware of the incident and was monitoring developments closely. INSURERS AFFECTED HSBC Life said 2,614 individual policyholders and 1,381 members under group corporate policies were affected. In a notice seen by CNA, the insurer said the potentially compromised information included names, personal identification numbers and contact details. Investigations were ongoing, but HSBC Life said it understood that no medical records were at risk. It stressed that its own systems were not compromised and that policyholders could continue accessing their benefits as usual. Alliance Medinet had also advised that login credentials and passwords were unaffected. HSBC Life said it had informed affected individuals and distribution partners, and advised policyholders to remain vigilant against scams and phishing attempts. Income Insurance said the incident affected one of its corporate accounts, involving about 70 individuals. The potentially affected information included names, personal identification numbers, mobile numbers, policy numbers and coverage start and end dates. "There is currently no evidence that bank account information or medical information has been compromised," it said on Saturday, adding that it had taken steps to inform those affected. Meanwhile, Singlife said 323 customers under its Employee Benefits group health insurance could have been affected. The potentially compromised data included names, NRIC numbers, dates of birth, contact numbers, corporate email addresses, company names and policy information. "There is currently no indication that any personal health or medical information is affected," Singlife said, adding that it had contacted affected customers. All three insurers said there was no evidence that their own systems had been compromised. CNA has contacted Great Eastern, which also uses Alliance Medinet's services, to ask whether its customers were affected.

Alliance Medinet is the corporate healthcare arm of Alliance Healthcare Group, specialising in managed healthcare services and third-party administration services.

The group said affected members were in the process of being notified by Alliance Medinet, its partners or relevant clients.

In response to CNA's queries, the Cyber Security Agency of Singapore said it was aware of the incident and was monitoring developments closely.

HSBC Life said 2,614 individual policyholders and 1,381 members under group corporate policies were affected.

In a notice seen by CNA, the insurer said the potentially compromised information included names, personal identification numbers and contact details.

Investigations were ongoing, but HSBC Life said it understood that no medical records were at risk.

It stressed that its own systems were not compromised and that policyholders could continue accessing their benefits as usual. Alliance Medinet had also advised that login credentials and passwords were unaffected.

HSBC Life said it had informed affected individuals and distribution partners, and advised policyholders to remain vigilant against scams and phishing attempts.

Income Insurance said the incident affected one of its corporate accounts, involving about 70 individuals.

The potentially affected information included names, personal identification numbers, mobile numbers, policy numbers and coverage start and end dates.

"There is currently no evidence that bank account information or medical information has been compromised," it said on Saturday, adding that it had taken steps to inform those affected.

Meanwhile, Singlife said 323 customers under its Employee Benefits group health insurance could have been affected.

The potentially compromised data included names, NRIC numbers, dates of birth, contact numbers, corporate email addresses, company names and policy information.

"There is currently no indication that any personal health or medical information is affected," Singlife said, adding that it had contacted affected customers.

All three insurers said there was no evidence that their own systems had been compromised.

CNA has contacted Great Eastern, which also uses Alliance Medinet's services, to ask whether its customers were affected.

INVESTIGATIONS ONGOING

Alliance Healthcare Group said it acted immediately to contain the incident upon discovering it and engaged independent cybersecurity and forensic specialists to investigate the breach.

It has also introduced round-the-clock network monitoring and dark web monitoring systems, while strengthening its IT systems, processes and security controls.

The incident was reported to Singapore's Personal Data Protection Commission on Oct 21.

"Protecting the information entrusted to us is a responsibility we take very seriously, and we remain committed to working closely with all parties to resolve the matter," the group said.

It added that its other subsidiaries were not affected by the incident.

Alliance Healthcare Group said it would provide a fuller update in due course and keep shareholders informed of any material developments.

It also advised shareholders to exercise caution when dealing in its shares or securities and to seek professional advice where necessary.

Get our pick of top stories and thought-provoking articles in your inbox

Stay updated with notifications for breaking news and our best stories

Join our channel for the top reads for the day on your preferred chat app

Alliance Medinet 为多家保险公司提供服务，包括汇丰人寿、新加坡人寿和 Income Insurance，这些公司均表示其客户受到了此次事件的影响。

图中电视屏幕上显示的是Alliance Medinet的标志。（图片来源：Alliance Medinet）

这段音频由人工智能工具生成。

新加坡：医疗服务提供商 Alliance Medinet 约 11 万名会员的个人数据在一次网络事件中遭到泄露，受影响的还有汇丰人寿、Income Insurance 和 Singlife 等保险公司的客户。

这三家保险公司表示，近 4400 名客户受到此次事件的影响或可能受到影响，该事件涉及未经授权访问 Alliance Medinet 的会员数据库。

母公司 Alliance Healthcare Group 在周六（10 月 24 日）提交给证券交易所的文件中表示，可能泄露的信息包括姓名、个人识别号码和联系方式。

声明还补充说，七名成员的银行账户信息和一名成员的医疗诊断信息也可能已被泄露。

CNA游戏 猜词游戏 逐行破解单词 流行词游戏 用给定的字母组成单词 迷你数独 小谜题，脑力挑战 迷你填字游戏 小方格，大挑战 单词搜索 尽可能多地找出单词 显示更多 显示更少 Alliance Medinet是Alliance Healthcare Group的企业医疗保健部门，专门从事医疗保健管理和第三方管理服务。该集团表示，受影响的成员正在由Alliance Medinet、其合作伙伴或相关客户进行通知。新加坡网络安全局在回复CNA的询问时表示，他们已经了解此事，并正在密切关注事态发展。受影响的保险公司 汇丰人寿表示，2614名个人保单持有人和1381名团体企业保单成员受到影响。在CNA看到的一份通知中，该保险公司表示，可能泄露的信息包括姓名、个人识别号码和联系方式。调查仍在进行中，但汇丰人寿表示，据了解，没有医疗记录面临风险。该公司强调，其自身系统并未受到影响，保单持有人可以照常享受保险福利。Alliance Medinet 也表示，登录凭证和密码不受影响。汇丰人寿表示，已通知受影响的个人和分销合作伙伴，并建议保单持有人警惕诈骗和网络钓鱼。Income Insurance 表示，此次事件影响了其一个企业账户，涉及约 70 名个人。可能受影响的信息包括姓名、个人识别码、手机号码、保单号码以及保险的起止日期。该公司周六表示：“目前没有证据表明银行账户信息或医疗信息遭到泄露。”并补充说，已采取措施通知受影响人员。与此同时，Singlife 表示，其员工福利团体健康保险的 323 名客户可能受到影响。可能泄露的数据包括姓名、身份证号码、出生日期、联系电话、公司邮箱地址、公司名称和保单信息。Singlife 表示：“目前没有迹象表明任何个人健康或医疗信息受到影响。”并补充说，已联系受影响的客户。三家保险公司均表示，没有证据表明其自身系统遭到入侵。CNA已联系同样使用Alliance Medinet服务的Great Eastern，询问其客户是否受到影响。

Alliance Medinet 是 Alliance Healthcare Group 的企业医疗保健部门，专门从事医疗保健管理和第三方管理服务。

该组织表示，受影响的成员正在收到Alliance Medinet、其合作伙伴或相关客户的通知。

针对亚洲新闻台（CNA）的询问，新加坡网络安全局表示，他们已经知晓此事，并正在密切关注事态发展。

汇丰人寿表示，共有 2,614 名个人保单持有人和 1,381 名团体企业保单成员受到影响。

据 CNA 看到的一份通知显示，该保险公司表示，可能泄露的信息包括姓名、个人识别号码和联系方式。

调查仍在进行中，但汇丰人寿表示，据了解，没有任何医疗记录面临风险。

该公司强调，其自身系统并未受到损害，保单持有人可以照常享受保险福利。Alliance Medinet 还表示，登录凭证和密码不受影响。

汇丰人寿表示，已通知受影响的个人和分销合作伙伴，并建议保单持有人对诈骗和网络钓鱼保持警惕。

Income Insurance公司表示，该事件影响了其一个企业账户，涉及约70人。

可能受影响的信息包括姓名、个人识别号码、手机号码、保单号码以及保险生效和终止日期。

该机构周六表示，“目前没有证据表明银行账户信息或医疗信息已被泄露”，并补充说，已采取措施通知受影响的人员。

与此同时，新加坡人寿表示，其员工福利团体健康保险的 323 名客户可能受到了影响。

可能泄露的数据包括姓名、身份证号码、出生日期、联系电话、公司电子邮件地址、公司名称和保单信息。

Singlife表示：“目前没有任何迹象表明任何个人健康或医疗信息受到影响”，并补充说，公司已联系了受影响的客户。

三家保险公司均表示，没有证据表明其自身系统遭到入侵。

CNA已联系同样使用Alliance Medinet服务的Great Eastern，询问其客户是否受到影响。

调查仍在进行中

Alliance Healthcare Group表示，在发现事件后立即采取行动控制事态发展，并聘请了独立的网络安全和取证专家对此次安全漏洞进行调查。

该公司还引入了全天候网络监控和暗网监控系统，同时加强了其IT系统、流程和安全控制。

该事件已于 10 月 21 日上报新加坡个人数据保护委员会。

该组织表示：“保护委托给我们的信息是我们非常重视的责任，我们将继续与各方密切合作，解决此事。”

该公司还补充说，其其他子公司未受此次事件影响。

Alliance Healthcare Group表示，将在适当时候提供更全面的更新信息，并随时向股东通报任何重大进展。

该公司还建议股东在交易其股票或证券时谨慎行事，并在必要时寻求专业建议。

订阅我们的邮件，即可获取精选热点新闻和引人深思的文章。

订阅通知，第一时间获取突发新闻和精彩报道。

加入我们的频道，即可在您常用的聊天应用上获取当日热门文章。