Doctor Anywhere hit by data breach in 'malicious cyber incident'

The firm has not said how many customers were affected and what type of data was compromised

Doctor Anywhere said it has engaged a cybersecurity and forensic specialist to support its investigation. PHOTO: BT FILE

[SINGAPORE] Personal data of users of Doctor Anywhere have been leaked in a data breach, the group said in a statement on the evening of Friday (Nov 6).

It said the data breach was the result of “a malicious cyber incident involving unauthorised access by an unknown third party”, but did not say when it happened, how many customers were affected and what type of data was compromised.

“As investigations are still ongoing, we are not able to provide any other details the incident at this stage,” it said in the statement.

Doctor Anywhere said it engaged cybersecurity and forensic specialist Ensign InfoSecurity to support its investigation and strengthen its IT systems after the incident.

“As of Oct 30, Ensign InfoSecurity has validated the security fixes deployed by our IT team and confirmed that the identified vulnerabilities in our system have been secured,” Doctor Anywhere said.

“Based on investigation to date, all clinical records are not affected by this incident.”

THE BUSINESS TIMES INSIGHTS

Powering Asean's Future 2026

Find out how enterprises are navigating power constraints and sustainability targets

The affected users are in the process of being notified, Doctor Anywhere said, including clients of Adept Health, one of its subsidiaries which works with other organisations to administer corporate benefits.

Selected personal data of members with corporate benefits is maintained in Doctor Anywhere’s systems to facilitate the administration of corporate benefits.

It added that it has reported the data breach to the Singapore Personal Data Protection Commission and made a police report.

Doctor Anywhere lays off 8.1% of workforce across Singapore and South-east Asia

Doctor Anywhere grows revenue 58%, narrows losses in 2023

Doctor Anywhere said: “We sincerely apologise for any concern this incident may cause. Our priority remains ensuring business continuity, communicating with the affected stakeholders and implementing further cybersecurity enhancements as part of our ongoing response to the incident.”

It added that its services are operating as usual and customers can continue to access and receive medical treatment at its healthcare facilities. THE STRAITS TIMES

with us your feedback on BT's products and services

Analysts cut DBS target price on lower 2027 earnings, but see buying opportunity after price slide

China Investment Corp, PGIM’s 50% stake in Nex mall up for sale; asking S$1.2 billion

Nvidia CEO Jensen Huang drops from world’s top 10 richest after chips sell-off

OCBC wealth clients turn defensive amid market volatility as Q3 profit rises 3%