Asiaone Minmed Group Faces Cybersecurity Incident Affecting Teleconsultation Services
Article Content
- •Minmed Group's teleconsultation system was compromised in a recent cyber incident.
- •Clinical records were not affected, and the incident was contained to a standalone system.
- •This is the third healthcare cybersecurity incident reported in Singapore within a week.
Minmed Group reported a 'malicious cybersecurity incident' affecting its teleconsultation and health screening systems on November 11, 2026. The incident is reportedly limited to a specific standalone system, with clinical records unaffected. Minmed has engaged Ensign InfoSecurity for a formal investigation and to enhance its cybersecurity measures. The company has reported the incident to the Personal Data Protection Commission and made a police report, while maintaining operational healthcare services. This incident marks the third cybersecurity event involving a healthcare provider in Singapore within a week, following attacks on Fullerton Health and Doctor Anywhere. Minmed has taken steps to address identified vulnerabilities and is cooperating with authorities. Further details remain undisclosed as investigations continue.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Alliance Medinet in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What systems were affected by the incident?
Were any clinical records compromised?
What actions is Minmed taking in response?
Continue Reading
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has… 
Critical Code Injection Vulnerability in Staggs Plugin for WordPress A critical code injection vulnerability, CVE-2026-78287, has been identified in the Staggs plugin for WordPress, affecting versions up to 3.3.0. This flaw allows unauthenticated attackers to execute arbitrary code remotely, posing severe risks to affected sites. The vulnerability stems from improper control over code…