A Committee of Inquiry hearing on the SingHealth data breach revealed a suspected security incident in January involving malware-infected workstations was not reported, Yahoo News Singapore reports. The Computer Emergency Response Team's Benjamin Lee said despite several workstations sending suspicious inquiries to the SingHealth database, the incidents remained unreported. Integrated Health Information Systems Senior Manager Ernest Tan said incidents can only be reported under the Standard Operating Procedure when there is “an actual breach or instance where (critical information infrastructure) was successfully compromised.” Tan added there was no investigation to identify the physical locations of the workstations or if they were infected with malware. The COI is expected to submit its report to Minister S. Iswaran by the end of the year.
Full Story