M1 and Doctor Anywhere disclose data breaches affecting personal information
Telecom provider M1 and healthcare platform Doctor Anywhere reported separate data breaches that exposed customers' personal details, though neither company said financial or clinical records were compromised.
Singapore's telecom operator M1 confirmed a data breach on Oct. 30 that exposed customers' names, NRIC or FIN numbers, dates of birth, mobile numbers, email addresses and residential addresses. In an email to customers, M1 said no payment card, financial or banking information, nor account access, was compromised and urged users to be cautious of unsolicited communications.
"M1 takes the security and confidentiality of information entrusted to us very seriously. We regret that this data breach has occurred and apologise for the concern it has caused you," the company said.
Healthcare provider Doctor Anywhere also reported a "malicious cyber incident" that resulted in unauthorised access to personal data of its users. The provider did not disclose the timing, scope or specific data types involved, but said investigations are ongoing and that an independent cybersecurity firm, Ensign InfoSecurity, has validated security fixes and confirmed that clinical records were not affected.
Doctor Anywhere has notified the Singapore Personal Data Protection Commission, filed a police report and informed affected corporate partners through its subsidiary Adept Health. The company affirmed that its services remain operational and that it continues to monitor the situation while implementing further cybersecurity enhancements.
CNA contacted the Personal Data Protection Commission, M1 and Doctor Anywhere for additional comments.