Fullerton Health server breach may expose migrant workers' personal data
A cybersecurity incident on a server supporting Fullerton Health's Migrant Worker Primary Care Plan may have compromised personal details of migrant workers, prompting investigations and notifications to authorities.
Fullerton Health said a server used for its Migrant Worker Primary Care Plan was accessed without authorization, potentially exposing full names, FIN numbers, dates of birth, mobile numbers, email addresses and residential addresses of migrant workers. The provider discovered the breach on Oct 31 and issued a notice on Nov 9.
The company said the incident appears limited to the standalone system for the Primary Care Plan and that no health, medical or financial information was involved. It activated its incident-response protocols, secured its network and confirmed that all managed care services and facilities remain operational.
Fullerton Health has reported the breach to Singapore's Personal Data Protection Commission, filed a police report and informed the Ministry of Manpower. It is working with authorities and plans to notify affected workers, offering guidance on protective steps.
The breach follows a series of recent Singapore data incidents, including disclosures by telco M1, telehealth provider Doctor Anywhere, Singapore Airlines' software provider Amadeus, SPH Media and food-services firm SATS. Authorities are investigating the Fullerton Health incident alongside these other cases.