Fullerton Health vendor hit by hackers, exposing customer data; police report lodged

SINGAPORE: Fullerton Health has lodged a police report after its vendor's server was hacked, exposing the non-public knowledge of some clients in Singapore.

The vendor, Agape Connecting People Holdings, helps to make appointments for sufferers of Fullerton Health, stated the healthcare supplier on Monday (Oct 25).

"Fullerton Health confirms that its own IT network, systems and databases have not been accessed or breached," it added.

In an announcement, Agape stated it found on Oct 19 that shopper data was compromised attributable to "unauthorised access by a malicious third party".

Customer knowledge which will have been compromised was restricted to call and make contact with particulars, stated the corporate, including that no bank card data and passwords have been uncovered.

"The incident appears to have been contained to our client Fullerton Healthcare," it stated. 

"The intrusion was identified and we acted immediately to prevent further compromise. The system was isolated and suspended. None of our core infrastructure has been compromised."

In response to CNA's queries, Fullerton Health stated it has notified clients identified to be affected in Singapore.

"Investigations are still ongoing to ascertain the precise number and identity of affected individuals. Fullerton Health has ascertained that the breach involved data of its patients in Singapore operations," stated the healthcare supplier, including that its non-Singapore operations are usually not affected by the breach.

"The company has also engaged digital forensic and cybersecurity experts to assist in investigations and to work with Agape to determine the causes of the incident, and the remedial actions to prevent a recurrence," it added.