Alliance Healthcare Group said personal information for about 110,000 Alliance Medinet members was compromised in unauthorized access to its membership system, with bank account details and a medical diagnosis also potentially involved.
The company said the affected information may include names, personal identification numbers and contact details. Bank account information for seven members and medical diagnosis information for one member may also have been compromised. Alliance Healthcare reported the incident to Singapore’s Personal Data Protection Commission (PDPC) on Oct. 21.
The company said it took steps to contain the incident and hired independent cybersecurity and forensic specialists. It set up continuous network and dark-web monitoring, and is notifying affected members through Alliance Medinet, its partners or relevant clients. Alliance Healthcare said its other subsidiaries were not affected.
Alliance Medinet is the group’s corporate healthcare and managed-care arm. Its website lists employee benefits, claims management and third-party administration among its services.
CNA reported that HSBC Life identified 2,614 individual policyholders and 1,381 members covered by group corporate policies as affected. CNA reported HSBC Life said its systems were not compromised. CNA cited Income Insurance’s press release: one corporate account involving about 70 people was affected. It said there was no current evidence that bank account information or medical information had been compromised, and no indication its systems were compromised. Income Insurance also advised customers to watch for suspicious messages seeking personal information, CNA reported.
Alliance Healthcare requested an immediate trading halt on Oct. 23 pending an announcement, according to a Singapore Exchange notice. The company said it would provide a fuller update in due course and notify shareholders of material developments, but did not set a date for its next update.
