2026 Doctor Anywhere — malicious cyber incident; names, NRIC/passport, bank details; clinical records not affected
Data compromised
Customer email (Straits Times): names, email addresses, identity-card and passport numbers, dates of birth, emergency-contact details and bank-account details. No evidence passwords, login credentials, payment cards or images of ID documents were compromised. Clinical records not affected as of 30 Oct. Adept Health / corporate-benefits members also in scope (Income Insurance names NRIC/FIN or passport, address, gender, nationality, race, policy details, bank name and account number). Census unpublished. recordsAffected 0.
Technical writeup
Root cause
Malicious cyber incident with unauthorised access by an unknown third party. Doctor Anywhere says it learned of the breach on 29 October 2026. Ensign InfoSecurity validated security fixes by 30 October. Intrusion path unpublished. Reported to PDPC and police.