Alliance Medinet breach compromises about 110,000 members in Singapore

Alliance Healthcare Group said in a Singapore Exchange filing on October 24, 2026 that a third party gained unauthorised access to the membership database of Alliance Medinet, its corporate healthcare and third-party administration arm, and that the personal data of approximately 110,000 members in that database have been compromised. The data listed as potentially affected covers names, personal identification numbers and contact information. On the group's initial assessment, seven members may also have had bank account information compromised, and one member may have had a medical diagnosis compromised. The incident was reported to Singapore's Personal Data Protection Commission on October 21, and the Cyber Security Agency of Singapore told CNA it was aware of the incident and monitoring developments.

Insurers that use Medinet have confirmed their own customers are among those affected. Income Insurance said one corporate account covering about 70 people was affected, with names, identification numbers, mobile numbers, policy numbers and coverage dates potentially involved, and no evidence its own systems were compromised. HSBC Life Singapore said 2,614 individual policyholders and 1,381 corporate policy members were affected, that login credentials and passwords were not affected, and that it understood no medical records were at risk. Singlife said 323 Employee Benefits customers may have been affected. Alliance Healthcare Group said other group subsidiaries were not affected, that it had brought in independent cybersecurity and forensic specialists, and that affected members were being notified by Medinet, its partners or the relevant clients.

Sources: RecaTools; Goody Feed, reporting CNA