Doctor Anywhere, with over three million users in South-east Asia, reports personal data leak in Singapore

Singapore, November 7 — Healthcare provider Doctor Anywhere has experienced a "malicious cyber incident" that resulted in the unauthorized disclosure of personal information belonging to its users. In a statement, Doctor Anywhere disclosed that the breach was caused by "unauthorised access by an unknown third party," but refrained from specifying the date of the incident, the number of affected customers, or the nature of the compromised data, citing the ongoing investigation.

Doctor Anywhere, which boasts a user base of over three million across South-east Asia, including more than a thousand corporate accounts, has promptly taken action to address the issue. In response, the company engaged cybersecurity firm Ensign InfoSecurity to assist in its investigation and improve its IT systems. As of October 30, Ensign InfoSecurity confirmed that the vulnerabilities in Doctor Anywhere's system had been secured following the implementation of security fixes.

Clinical records were not impacted by the incident, and affected users are being notified accordingly. The breach also affected clients of Adept Health, a subsidiary of Doctor Anywhere that provides corporate benefits management. Doctor Anywhere remains committed to maintaining business continuity, communicating with affected stakeholders, and implementing additional cybersecurity enhancements as part of its ongoing response to the incident.

The company notified relevant authorities, including the Personal Data Protection Commission (PDPC), and filed a police report on the matter. PDPC is actively investigating the case. Despite the incident, Doctor Anywhere assures its services remain accessible, and users can continue receiving medical treatment at its facilities.

Requests for further information on the scale of the data breach have been directed to Doctor Anywhere.