Alliance Healthcare Group Limited said a security review has closed the route used in a breach of its Alliance Medinet Pte. Ltd. membership system, while investigators continue assessing the exposure of about 110,000 members’ data.
KPMG Services Pte. Ltd. reviewed corrective work completed by Medinet’s IT team and found that the third-party route into the database had been shut, the group said in an Oct. 26 update. By then, checks had not identified further signs of unauthorized access to Medinet’s systems. The investigation remains active, with KPMG examining the breach’s cause, reach and impact while Alliance Healthcare evaluates the financial and operational effects.
In an earlier disclosure of the breach, Alliance Healthcare said information associated with about 110,000 members was compromised. Potentially exposed information included members’ names, personal identification numbers and contact details. The initial review also raised the possibility that bank account details for seven members and diagnosis information for one member had been exposed.
The company said the breach was confined to the system holding Medinet’s membership database. Other group systems, including financial systems, were unaffected, and Medinet continues to provide services. Alliance Healthcare said it had implemented enhanced continuous monitoring covering network connectivity, databases and servers.
In its Oct. 24 disclosure, the group also said it had hired independent cybersecurity and forensic specialists and begun 24-hour network and dark-web monitoring. The newer monitoring measures cover network connections as well as database and server activity.
Alliance Healthcare said it reported the incident to the Personal Data Protection Commission of Singapore (PDPC) on Oct. 21. Medinet, its partners or relevant clients are notifying affected members, the group said. It will inform shareholders of material developments but did not set a date for its next update.
