M1 And Doctor Anywhere Report Data Breaches In Singapore

Two major organizations in Singapore have disclosed security incidents involving the unauthorized access of user data. These breaches have impacted customers of both a telecommunications provider and a healthcare service.

M1 Customer Data Exposure

A security breach occurred at M1 on October 30, leading to the compromise of personal information belonging to its customers. The leaked data encompasses names, residential addresses, email addresses, mobile phone numbers, and dates of birth, as well as NRIC or FIN identification numbers. Despite the breach, the company confirmed that no financial records, banking information, or payment card details were accessed. Furthermore, customer account access remained secure. The organization expressed regret over the incident and urged its users to exercise caution when dealing with unsolicited messages, emails, or phone calls.

Doctor Anywhere Cyber Incident

Healthcare provider Doctor Anywhere also disclosed a malicious cyber incident involving unauthorized access by an unknown third party. While personal data was compromised, the organization emphasized that clinical records were not affected by the breach. To address the situation, the provider engaged Ensign InfoSecurity, an independent forensic and cybersecurity specialist, to investigate the breach and reinforce its IT systems. By October 30, the specialist firm had validated the security fixes implemented by the internal IT team, confirming that the identified vulnerabilities were successfully secured.

Remediation And Reporting Steps

Both organizations reported these breaches on November 6. Doctor Anywhere has notified the Personal Data Protection Commission and filed a report with law enforcement authorities. The company is currently in the process of notifying affected users. Additionally, its subsidiary, Adept Health, which manages corporate benefits for various organizations, has informed its partners about the event. The healthcare provider stated that its services remain fully operational, allowing patients to continue receiving treatment at its facilities. The organization remains focused on maintaining business continuity and implementing further cybersecurity enhancements to prevent future occurrences.