> series: anatomy_of_a_breach —— part: 115 —— target: singhealth —— patients: 1,500,000 —— vip_targeted: prime_minister_lee<span class="cursor-blink">_</span>_
On 20 July 2018, Singapore's government disclosed that SingHealth — the country's largest public healthcare group — had been breached by a sophisticated threat actor. The personal data of approximately 1.5 million patients (names, NRIC numbers, addresses, gender, and dates of birth) and the outpatient prescription records of 160,000 patients were stolen. Prime Minister Lee Hsien Loong was among those whose prescription data was specifically targeted — his records were repeatedly and specifically accessed by the attackers.
The breach, attributed to a nation-state threat actor, had been active from approximately June to July 2018. The attackers exploited vulnerabilities in SingHealth's front-end workstations to gain initial access, then moved laterally through the network to reach the electronic medical records database. Singapore's Committee of Inquiry into the breach found multiple security failures including inadequate network segmentation, delayed incident response, and insufficient monitoring — the same failure patterns documented in healthcare breaches throughout this series from the NHS to Anthem.
We'll scope your test for free and tell you exactly what you need. No obligation, no hard sell.
Free Scoping CallThe SingHealth breach proved that healthcare data is not just a target for financial criminals — it is a target for nation-state intelligence services seeking information about political leaders and government officials. For UK healthcare organisations, the threat model must account for both criminal and state-sponsored adversaries. Cyber Essentials provides the baseline. Penetration testing validates controls against sophisticated adversaries. SOC in a Box for Healthcare monitors continuously. And UK Cyber Defence's threat intelligence provides awareness of campaigns targeting the healthcare sector.
<a href="/penetration-testing">Penetration testing</a> validates your healthcare security. <a href="https://www.socinabox.co.uk/sectors/gp-surgeries">SOC in a Box for Healthcare</a> monitors 24/7. <a href="/cyber-essentials">Cyber Essentials</a> provides the baseline.
We'll scope your test for free and tell you exactly what you need. No obligation, no hard sell.
Free Scoping Call