新加坡：医疗服务提供商Alliance Medinet约11万名会员的个人数据在一起网络安全事件中遭到泄露，事件涉及有人未经授权访问其会员数据库。
SINGAPORE: The personal data of about 110,000 members of healthcare services provider Alliance Medinet has been compromised in a cybersecurity incident involving unauthorised access to its membership database.
母公司Alliance Healthcare Group周六（10月24日）在一份交易所文件中表示，可能受影响的数据包括姓名、个人识别号码和联系方式。
The potentially affected data includes names, personal identification numbers and contact information, parent company Alliance Healthcare Group said in a bourse filing on Saturday (Oct 24).
该公司补充说，七名会员的银行账户信息以及一名会员的医疗诊断信息也可能遭到泄露。
It added that bank account information belonging to seven members and one member's medical diagnosis might also have been compromised.
“根据迄今进行的调查，该会员数据库中约11万名会员的个人数据已被第三方泄露，”该公司表示。
"Based on investigations conducted to date, the personal data of approximately 110,000 members in that membership database have been compromised by a third-party," it said.
Alliance Medinet是Alliance Healthcare Group旗下的企业医疗部门，专门提供管理式医疗服务及第三方行政管理服务等。
Alliance Medinet is the corporate healthcare arm of Alliance Healthcare Group, specialising in managed healthcare services and third-party administration services, among others.
该集团表示，Alliance Medinet、其合作伙伴或相关客户正在通知受影响的会员。
The group said affected members were in the process of being notified by Alliance Medinet, its partners or relevant clients.
该集团补充说，Alliance Healthcare Group的其他子公司未受此次事件影响。
Other subsidiaries of Alliance Healthcare Group were not affected by the incident, it added.
Alliance Medinet为多家保险公司提供服务，包括汇丰人寿、大东方和Income Insurance。
Alliance Medinet provides services to several insurers, including HSBC Life, Great Eastern and Income Insurance.
该集团表示，此次事件涉及有人未经授权访问其包含会员数据库的系统。
The group said the incident involved unauthorised access to its system containing its membership database.
《海峡时报》看到的一份通知显示，汇丰人寿表示，2,614名个人保单持有人和1,381名团体企业保单下的会员受到影响。
In a notice seen by CNA, HSBC Life said 2,614 individual policyholders and 1,381 members under group corporate policies were affected.
该公司补充说，其系统未被入侵，客户仍可使用Benefits Hub应用，因为Alliance Medinet已表示相关凭证未受影响。
It added that its systems were not compromised and customers could still access the Benefits Hub app, as Alliance Medinet had indicated that credentials were unaffected.
Income Insurance在周六的一份新闻稿中表示，此次事件影响了其一个企业账户，涉及约70人。
Income Insurance said in a press release on Saturday that the incident affected one of its corporate accounts, involving about 70 individuals.
该保险公司表示，可能受影响的个人数据包括姓名、个人识别号码、手机号码、保单号码以及保障开始和结束日期。
The insurer said the personal data potentially affected included names, personal identification numbers, mobile numbers, policy numbers and coverage start and end dates.
声明补充说：“目前没有证据表明银行账户信息或医疗信息遭到泄露。”
“There is currently no evidence that bank account information or medical information has been compromised,” it added.
Income Insurance表示，在周四接到事件通知后，已启动事件应对流程并通报了相关主管部门。
Income Insurance said it had activated its incident response processes and informed the relevant authorities after being notified of the incident on Thursday.
声明说：“我们也已采取必要措施，通知受影响的保单持有人和个人。”
“We have also taken the necessary steps to inform the affected policyholder and individuals,” it said.
声明还称，Income Insurance正与Alliance Medinet合作调查此事，核实所涉信息并评估潜在影响。
Income Insurance is working with Alliance Medinet to investigate the matter, verify the information involved and assess the potential impact, it added.
声明表示：“目前没有迹象表明Income Insurance的系统遭到入侵。”Income Insurance还提醒客户对潜在诈骗保持警惕，包括索取个人信息的可疑信息。
“There is currently no indication that Income Insurance’s systems were compromised.”Income Insurance also advised customers to remain vigilant against potential scams, including suspicious messages seeking their personal information.
CNA已联系使用Alliance Medinet服务的其他保险公司，包括大东方和Singlife，询问其客户是否受到影响。
CNA has reached out to other insurers using Alliance Medinet’s services, including Great Eastern and Singlife to ask if their customers were affected.
调查进行中。Alliance Healthcare Group表示，其团队在发现该事件后立即采取行动加以控制。
ONGOING INVESTIGATION Alliance Healthcare Group said its team acted immediately to contain the incident after discovering it.
该公司聘请了独立的网络安全和取证专家，以支持正式调查，并进一步加强其IT系统、流程和安全控制。
It engaged independent cybersecurity and forensic specialists to support a formal investigation and further strengthen its IT systems, processes and security controls.
声明说：“调查目前正在进行中。”并补充说，已部署24小时网络监控和暗网监控系统。该事件已于10月21日向新加坡个人数据保护委员会报告。
"Investigations are currently ongoing," it said, adding that 24-hour network monitoring and dark web monitoring systems had been put in place. The incident was reported to Singapore's Personal Data Protection Commission on Oct 21.
声明说：“保护托付给我们的信息是我们非常重视的责任，我们仍然致力于与各方密切合作解决此事。”
"Protecting the information entrusted to us is a responsibility we take very seriously, and we remain committed to working closely with all parties to resolve the matter," it said.
该集团表示，将在适当时候提供更全面的最新情况，并将就任何重大进展向股东通报。
The group said it would provide a fuller update in due course, and would keep shareholders updated of any material development.
该集团还建议股东在交易其股票或证券时保持谨慎，并在必要时寻求专业建议。
It also advised shareholders to exercise caution when dealing in its shares or securities and to seek professional advice where necessary.