MOH Statement On Cybersecurity Incident At Eye & Retina Surgeons

jonesftw

High Supremacy Member
Joined
Jul 12, 2010
Messages
39,039
Reaction score
3,818
The Ministry of Health (MOH) was informed on 16 August 2021 that Eye & Retina Surgeons (ERS), a specialist medical clinic, was the target of a ransomware attack on 6 August 2021. The incident affected its clinic server and clinic management system which managed more than 73,000 patients. The clinic’s compromised IT systems are not connected to MOH’s IT systems, such as the National Electronic Health Record, and there have been no similar cyberattacks on MOH’s IT systems.

2. ERS made a Police report on 13 August 2021. The incident was also reported to the Personal Data Protection Commission and Singapore Computer Emergency Response Team for further investigations. Upon notification, MOH had requested ERS to investigate the incident, carry out a thorough review of its systems and work with the Cyber Security Agency to take immediate mitigating actions to strengthen its cyber defence.

3. The Government takes a serious view of any cyberattack, illegal access of data or action that compromises the integrity, confidentiality and availability of data and IT systems in Singapore. Section 12(1) of the Private Hospitals and Medical Clinics Regulations states that licensees shall implement adequate safeguards (whether administrative, technical or physical) to protect medical records against accidental or unlawful loss, modification or destruction, or unauthorised access, disclosure, copying, use or modification, as well as to periodically monitor and evaluate such safeguards in place to ensure that they are effective and being complied with by the persons involved in handling medical records.

4. MOH had also issued a set of Healthcare Cybersecurity Essentials guidelines in August 2021 to remind all licensees to establish and constantly review their security safeguards, implement new measures as necessary and adopt best practices to secure their endpoints and IT systems. Following this incident, MOH will be reminding all its licensed healthcare institutions to remain vigilant, strengthen their cybersecurity posture, and ensure the security and integrity of their IT assets, systems, and patient data. It is only through the disciplined maintenance of a safe and secure data and IT system that healthcare professionals will be able to deliver accurate and appropriate care, and uphold patient safety.

 

shidenx

High Supremacy Member
Joined
Apr 17, 2001
Messages
45,869
Reaction score
426
Lai who is vendor come in admit mistake.

NCS, IBM, IHIS, NEC
 

fandango

High Supremacy Member
Joined
Dec 4, 2003
Messages
42,578
Reaction score
3,258
And how the hell they have 73,000 patients data????
 

zuoom

High Supremacy Member
Joined
Feb 18, 2002
Messages
32,282
Reaction score
278
So many patients for eyes?
 

Azzizz81

Suspended
Joined
May 4, 2001
Messages
49,495
Reaction score
2,262
Why Lee Hong Yi not doing cybersecurity? His sexpertise is needed
 

swageat

Arch-Supremacy Member
Joined
Jul 4, 2020
Messages
11,602
Reaction score
1,570
16 aug, moh was notified
Yesterday, 25 aug started to report this incident

More than 1 week 校正回歸 this incident ..?
 

Senna Wales

Great Supremacy Member
Joined
May 17, 2011
Messages
73,700
Reaction score
3,394
Do they really think MOH's entire system wasn't affected?
 

whatheheck

High Supremacy Member
Joined
May 18, 2012
Messages
28,307
Reaction score
1,598
Will be fined a lot or not

OwUf9pz.png


hjDJw2V.png


KAQJPze.png


8hHcoOI.png
 

hotamp

Master Member
Joined
Feb 28, 2012
Messages
3,238
Reaction score
372
wah one simple cataract in private smelly smelly $5k, just for easy calculation using cost averaging....5K x 73,000=365million?:oops:
 

tokiya

Supremacy Member
Joined
Nov 25, 2005
Messages
9,473
Reaction score
3,416
Hope sweep under carpet soon so everyone can hit KPI and get bonus.
 
Important Forum Advisory Note
This forum is moderated by volunteer moderators who will react only to members' feedback on posts. Moderators are not employees or representatives of HWZ. Forum members and moderators are responsible for their own posts.

Please refer to our Terms of Service for more information.
Top