Singapore healthcare provider Minmed Group has disclosed a cyberattack on a system supporting its teleconsultation and health screening services, in the third such disclosure by a Singapore healthcare provider in a week. The group said on Wednesday 11 November that the incident appeared limited to a single standalone system, that patients' clinical records were not affected, and that all of its clinics and services remain open.

Minmed runs general practitioner, dental and paediatric clinics across Singapore, as well as teleconsultation and health screening services. The affected system supports the online consultation and screening side of the business rather than the main clinical records. According to Goody Feed, the group said it acted immediately to contain the attack once it was discovered, and brought in cybersecurity firm Ensign InfoSecurity to investigate and strengthen its systems.

Fixes verified before the disclosure

One detail stands out in Minmed's account: the fixes were checked before the public statement. Ensign InfoSecurity had independently validated the security fixes by 5 November and confirmed that the weaknesses identified in the system had been secured, six days before Minmed disclosed the incident on 11 November. The group said it would continue working with Ensign to monitor and improve its cybersecurity.

Minmed gave no figure for how many people may have been affected, saying it could not share further details while investigations continue. It did not say when the attack began, how the attacker got in, or whether any data was taken. What it did confirm is that clinical records were untouched, which will reassure patients whose medical histories sit in its main systems.

Regulators and police informed

The group reported the incident to Singapore's Personal Data Protection Commission, the country's privacy regulator, and filed a police report. The commission told Channel NewsAsia that it is investigating the incident, as reported by Bitcomme, reproducing the Channel NewsAsia report. Patients with questions have been directed to contact Minmed directly.

Minmed is the third Singapore healthcare provider to disclose a cybersecurity incident in the space of a week. Fullerton Health said on 9 November that a server supporting its migrant worker primary care programme had been hit, with migrant workers' personal data affected. Doctor Anywhere disclosed on 6 November that a malicious incident had leaked users' personal data, although it said clinical records were not affected. Telco M1 also reported a breach on 6 November, exposing customers' names, identity numbers, dates of birth and addresses.

A pattern worth watching

The run of disclosures has put Singapore's healthcare sector under scrutiny, with regulators now investigating more than one incident at once. Healthcare providers hold large volumes of personal data, and teleconsultation systems have grown quickly since the pandemic, creating new systems that sit alongside, but separate from, core clinical records.

For Minmed patients, the practical advice is unchanged: watch for unusual messages claiming to come from the clinic, be cautious about links asking for personal details, and contact Minmed through its official channels if anything looks suspicious. The group says its services are operating normally, and the investigation continues. Further updates are expected as the regulator's inquiry and the forensic investigation progress.