140,000 migrant worker records hit in Fullerton Health cyber breach; new server planned
About 43,000 compromised records belonged to individuals whose work passes are no longer valid.
A cybersecurity breach at Fullerton Health exposed the records of approximately 140,000 migrant workers in Singapore. The unauthorized access to a standalone server hosting the Migrant Worker Primary Care Plan (PCP) did not affect health, medical, or personal financial data. The compromised records included full names, foreign identification numbers, dates of birth, mobile numbers, email addresses, and residential addresses.
About 43,000 of the affected individuals had invalid work passes. Fullerton Health Group (FHG) and the Ministry of Manpower (MOM) notified the public about the incident on November 9 and 14, respectively. The healthcare provider promptly isolated the affected server and implemented network-wide security measures. FHG is constructing a new server with embedded security measures for the new PCP enrolment portal.
Both FHG and MOM assured that the breach has not disrupted workers' access to the PCP. The PCP is mandatory for certain work permit and S Pass holders in sectors such as construction, marine shipyard, and process. Initial investigations by FHG's security monitoring provider found no evidence of abnormalities across other IT assets.
MOM is partnering with FHG on investigations and follow-up actions. The Ministry of Health has reminded healthcare institutions to enhance their cybersecurity measures, while the Cyber Security Agency of Singapore and Personal Data Protection Commission continue to monitor and respond to incidents.
Written by urgent.news from Straits Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
