Fullerton Health

A vendor for the private healthcare organization Fullerton Health experienced a breach, which allowed hackers to steal and sell consumer personal information.

The data of almost 400,000 persons, including Singaporeans' insurance policy information, was purportedly stolen by the hackers.

Customer names and identity card numbers, as well as data on bank accounts, employment, and medical histories, were among the data uploaded by the unnamed hackers, according to a sampling of the data they had access to.

It also had the personal details of the customers' children.

They took this matter very seriously as confidentiality of customer's personal data is of utmost importance and reached out to affected customers whose personal data may have been affected at the earliest possible time.

Source: https://www.straitstimes.com/singapore/courts-crime/fullerton-health-vendor-hacked-personal-details-of-customers-sold-online

TPRM report: https://scoringcyber.rankiteo.com/company/fullerton-health

"id": "ful211871222",
"linkid": "fullerton-health",
"type": "Breach",
"date": "10/2021",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '400,000',
                        'industry': 'Healthcare',
                        'location': 'Singapore',
                        'name': 'Fullerton Health',
                        'type': 'Private Healthcare Organization'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': '400,000',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Insurance Policy Information']},
 'description': 'A vendor for the private healthcare organization Fullerton '
                'Health experienced a breach, which allowed hackers to steal '
                'and sell consumer personal information. The data of almost '
                "400,000 persons, including Singaporeans' insurance policy "
                'information, was purportedly stolen by the hackers. Customer '
                'names and identity card numbers, as well as data on bank '
                'accounts, employment, and medical histories, were among the '
                'data uploaded by the unnamed hackers, according to a sampling '
                'of the data they had access to. It also had the personal '
                "details of the customers' children.",
 'impact': {'data_compromised': ['Customer names',
                                 'Identity card numbers',
                                 'Bank account data',
                                 'Employment information',
                                 'Medical histories',
                                 "Personal details of customers' children"]},
 'initial_access_broker': {'data_sold_on_dark_web': True},
 'motivation': 'Theft and sale of personal information',
 'response': {'communication_strategy': 'Reached out to affected customers '
                                        'whose personal data may have been '
                                        'affected at the earliest possible '
                                        'time'},
 'title': 'Data Breach at Fullerton Health Vendor',
 'type': 'Data Breach'}