PUBLISHED ONBYSean LerPrivate healthcare and wellness provider Minmed Group has become the latest to be hit by a cybersecurity threat.
Calling it a malicious cybersecurity incident, Minmed said in a statement on Wednesday (Nov 11) that a system supporting its teleconsultation and screening services was affected.
It added that its investigations so far have shown that the incident is limited to the specific standalone system and that clinical records were not affected.
“Upon discovery of the malicious threat, we acted immediately to contain the incident,” the group said.
To rectify the issue, Minmed said it has engaged cybersecurity services company Ensign InfoSecurity to support a formal investigation and strengthen its systems.
It added that as of Nov 5, the firm has independently validated the security fixes deployed and confirmed that the identified vulnerabilities in its system have been secured.
“We have taken the necessary steps to address the identified security vulnerabilities and will continue to maintain heightened vigilance, working closely with Ensign InfoSecurity to monitor and strengthen our cybersecurity measures.”
According to Minmed, it has reported the incident to the Personal Data Protection Commission and made a police report, adding that it is cooperating fully with all relevant authorities to support their investigations.
The group's healthcare services and clinics remain operational.
And while Minmed said it was unable to provide further details while investigations are ongoing, the group stated that it recognises the trust placed in it when it comes to handling personal and health-related information.
“Protecting that trust remains our priority and we sincerely apologise for any concern this incident may cause.”
Minmed is the third healthcare provider to be affected by a cybersecurity incident over the past seven days, after Fullerton Health and Doctor Anywhere also reported cyberattacks.
[[nid:750409]]