On 20^{th\u00a0<\/sup>July 2018, I received a few notifications on my TODAY app, with a heading that caught my attention on SingHealth suffered a cyberatttack, there was a press conference with the Health Minister and Communications and Information Minister, accompanied by a few other officials, gave details on this cyberattack. There were 1.5 million people who were affected by this cyberattack on SingHealth\u2019s database.<\/p>\n}

When I returned home on that night, I decided to read up more on this SingHealth Cyber Attack news. While reading the news, I realised that I could be one of the 1.5 million affected people mentioned in this news since I did visit SingHealth specialist outpatient clinic for follow up over the past few years. Thereafter, I logged in with my SingPass and yes, the status showed my non-medical personal data was accessed in the cyberattack.<\/p>\n

A mix of anger and disappointment filled my mind and brain when I became part of the 1.5 million affected people statistics. The personal data that were accessed during the cyber attack could be used by other parties in situations that might have a bigger detrimental impact and consequeneces beyond our imagination.<\/p>\n

What Data was taken?<\/strong><\/p>\n

\n
• Name<\/li>\n
• NRIC Number<\/li>\n
• Address<\/li>\n
• Gender<\/li>\n
• Race<\/li>\n
• Date of Birth<\/li>\n<\/ul>\n

  From the Singapore Government website news release:<\/p>\n

  5) Should you be worried?<\/em><\/p>\n

  In short, not really, said the authorities. CSA chief executive David Koh said the stolen information are \u201cbasic demographic data\u201d.<\/em>\u00a0<\/em><\/p>\n

  \u201cWe are watching to see if anything appears on the Internet both in the open and in some of the less well-known websites,\u201d he added, noting that this has occasionally happened in past data breaches.<\/em><\/p>\n

  \u201cBut considering the type of data that\u2019s been exfiltrated, it is \u2013 from our professional experience \u2013 unlikely that these will appear, because there is no strong commercial value to these types of data.\u201d<\/em><\/p>\n

  Source:\u00a0https:\/\/www.gov.sg\/news\/content\/channel-newsasia—singhealth-cyberattack-what-you-need-to-know<\/a><\/p>\n

  What can you do with the \u201cbasic demographic data\u201d???<\/strong><\/p>\n

  With your name, NRIC number and date of birth, a hacker\/identity thief can do a lot of things with the three pieces of information. \u00a0The most disturbing statements released by Cyber Securtiy Agency Chief Executive David Koh are \u201cthe stolen information are \u201cbasic demographic data\u201d and \u201cthere is no strong commercial value to these types of data\u201d<\/p>\n

  I am not an information technology\/computer science qualified\/certified expert, however, with my current IT knowledge, strong interest and coverage in technology stuff\u00a0 since I started learning about computers and technology (on the B2C and B2B levels), the stolen \u201cbasic demographic data\u201d are now at the mercy of other people who can\/might make use of our data at our expense and well being, for their greed and exploitation.<\/p>\n

  What do I need to do or take note of if I am one of the 1.5million people whose personal data was breached?<\/strong><\/p>\n

  Paul Ducklin, Senior Technologist at Sophos said, \u201cThe data stolen in this breach is an identity thief’s goldmine. It’s a startling reminder to all Singaporeans that there is no such thing as ‘cyber attackers would never care about little old me’ \u2013 once your data is scooped up in a cybersecurity blunder of this sort, you simply can’t control where it will go next. Anyone affected in this breach has no choice but to assume that their personal information will end up for sale in the cyber underground, ready for active abuse by cybercrooks.\u201d<\/em><\/p>\n

  Ducklin recommends:<\/strong><\/p>\n

  \n
  1. Keep a careful watch over all your financial statements \u2013 bank accounts, payment cards, loans, pension funds, taxation records and so on. Report any suspicious activity immediately. (But please read points 3 and 4 below!)<\/li>\n
  2. Talk to your financial institutions about locking down account details in order to make it harder for cyber criminals to try to take over your accounts or to apply for services in your name.<\/li>\n
  3. Be especially suspicious of unsolicited communications that arrive in the wake of this breach offering any sort of help or asking for further details “to assist in the investigation.” Social engineers and scammers are experts at preying on people’s fears (and their willingness to help) after security incidents of this sort.<\/li>\n
  4. If you need help or advice on what to do next, don’t use contact information, web links or phone numbers that were sent to you online \u2013 look for contact information on existing invoices, on printed correspondence you received in the past, or by visiting an organisation’s office in person.<\/li>\n<\/ol>\n

     “Whether this was a lone hacker who got lucky, a well-oiled cybercrime gang or a state-sponsored attack team won’t get your personal data back, and it won’t change the fact that you can’t control who gets it next. Keep your own eyes open for any attempt to abuse your personal data in the future,” says Ducklin.<\/em><\/p>\n

     A big thank you to Paul Ducklin, Senior Technologist at Sophos for this commentary and Lewis PR for sharing this valuable pieace of commentary that allows me to share this invaluable piece of advice for all the 1.5million people affectd by this serious data breach.<\/p>\n

     There have been a number of sharing, thoughts and views on the recent SingHealth cyber attack issue.<\/p>\n

     Fellow technology blogger, Zit Seng wrote and shared his thoughts and views on the SingHealth data breach, you can read his them below, it\u2019s definitely worth a read –<\/p>\n

     Split Milk and SingHealth Data Breach – https:\/\/zitseng.com\/archives\/16548<\/a><\/p>\n

     SingHealth Data Breach is Serious – https:\/\/zitseng.com\/archives\/16534<\/a><\/p>\n

     Don\u2019t miss mrbrown (the Blogfather of Singapore)<\/a> YouTube video and podcast on the SingHealth cyber attack issue!<\/p>\n

     Kim Huat Thought of the Day \u2013 Cyber Security\u00a0YouTube<\/a> video – https:\/\/www.youtube.com\/watch?v=NxolUCsAu2s<\/a><\/p>\n