related media assets (image or videos) available. Click to see the gallery.

2 related media assets (image or videos) available. Click to see the gallery.

A total of 1.5 million SingHealth patients’ non-medical personal data were stolen, while 160,000 of those had their dispensed medicines’ records taken too, according to MCI and MOH.

SINGAPORE: The "most serious breach of personal data” in Singapore’s history took place last month, with 1.5 million SingHealth patients’ records accessed and copied while 160,000 of those had their outpatient dispensed medicines’ records taken, according to the Ministry of Health and Ministry of Communications and Information.

Among those affected was Prime Minister Lee Hsien Loong, with the attackers “specifically and repeatedly targeting” his personal particulars and information of his outpatient dispensed medicines, the ministries said in a joint release on Friday (Jul 20).

Advertisement

Advertisement

Several other ministers were also affected, including Emeritus Senior Minister Goh Chok Tong.

The personal data taken from the 1.5 million patients include their names, NRIC numbers, address, gender, race and date of birth, the release said, adding that the hackers did not amend or delete the records.



Patients’ medical records, including past diagnosis, doctors’ notes and health scans, were not affected.

“We have not found evidence of a similar breach in the other public healthcare IT systems,” they said.

Advertisement

Advertisement

"UNPRECEDENTED" ATTACK

At a news conference on Friday, Health Minister Gan Kim Yong apologised to patients affected. Calling the attack "unprecedented", Mr Gan said: "I'm deeply sorry that this has happened ... We must learn from this and emerge stronger and more resilient from this incident."

Also at the conference was Communications and Information Minister S Iswaran who vowed to get to the bottom of the breach.

"I want to assure everyone that the Government takes with utmost seriousness its responsibility of ensuring the security of public sector IT systems and databases," he said.

Investigations by the Cyber Security Agency of Singapore (CSA) and the Integrated Health Information System (IHiS) confirmed that the attack was a “deliberate, targeted and well-planned cyberattack” and was not the work of casual hackers or criminal gangs.

Channel NewsAsia understands that authorities have established who might be behind such an attack. There are only a few countries in the world who have the level of sophistication shown during the cyberattack campaign.

"I apologise. We are not able to reveal more because of operational security reasons," CSA chief executive David Koh said at the news conference when asked which country might have been involved.

None of the stolen data has surfaced in the public domain, including that of the prime minister.

"The attackers deliberately, repeatedly and specifically targeted his information and they were able to access and copy the dispensed medication record of Prime Minister Lee Hsien Loong," Mr Koh said.

"It's perhaps best not to speculate what the attacker had in mind," he added in response to a question on why Mr Lee's data was targeted.

In a Facebook post, Emeritus Senior Minister Goh Chok Tong revealed that his non-medical personal particulars with SingHealth had also been stolen.

"Cyber theft is a key risk when going digital. But we cannot stop the digital advance and must strive to build the most secure Smart Nation," he added.

SOPHISTICATED ATTACK

According to MCI and MOH, IHiS database administrators detected unusual activity on one of SingHealth’s IT databases on Jul 4, and acted immediately to stop it. They carried on their investigations, while putting in place additional security measures, the release said.

From Jul 4 to Jul 9, they continued to monitor the network traffic closely before ascertaining it was a cyberattack and alerted superiors. On Jul 10, MOH, SingHealth and CSA were informed and forensic investigations were carried out.

It was found that data was taken out from Jun 27 to Jul 4 this year, and the patient records accessed and copied were from those who visited SingHealth’s specialist outpatient clinics and polyclinics from May 1, 2015, to Jul 4 this year.

CSA ascertained the cyberattackers first accessed the network after breaching a front-end workstation, and managed to get privileged access to the database over time while also showing sophistication in cleaning up their digital footprints when doing so.

SingHealth has since lodged a police report on Jul 12, and police investigations are ongoing. These investigations are separate from those looking into the cyberattack, Channel NewsAsia understands.

Since kicking the cyberattacker out of the system on Jul 4, further attacks were observed but no further data were illegally stolen, the ministries said, adding there was no disruption of healthcare services during the period of the cyberattack and patient care has not been compromised.

STEPPING UP SECURITY

The ministries also said further measures have been introduced to tighten SingHealth’s IT security, including imposing Internet separation policies.

Additional controls on workstations and servers have also been introduced, as well as the resetting of user and systems accounts and installation of more system monitoring controls.

Furthermore, SingHealth will be progressively contacting all patients who visited its clinics and polyclinics during the abovementioned time period to notify them if their data has been stolen.

All patients, whether or not they are affected, will receive an SMS notification over the next five days. They can also proactively access the Health Buddy mobile app or SingHealth website to check if they have been affected, the release said.

MOH has also directed IHiS to conduct a thorough review of the public healthcare system here, with support from third-party experts. Areas of review include cybersecurity policies, threat management processes, IT system controls and organisational and staff capabilities.

Advisories have also been sent to all healthcare institutions, public and private, on the cybersecurity precautions and measures to be taken, the release added.

COI TO BE CONVENED

Separately, the Minister-in-charge of Cybersecurity S Iswaran on Friday will convene a Committee of Inquiry, to be headed by Mr Richard Magnus, a retired Chief District Judge and member of the Public Service Commission.

More details of its members and terms of reference, as well as when the COI will be held, will be revealed at a later date, MCI said.

Addressing reporters at a news conference, Mr Iswaran said: "Because this incident occurred in the SingHealth IT system and is within the healthcare cluster, that has to be the natural focal point of the COI’s work."

However, to be meaningful it also has to draw lessons or policy recommendations that can be applied to the public sector and potentially the private sector, he added.

Mr Iswaran has also directed CSA to work closely with all 11 keys sectors - energy, water, banking and finance, healthcare, transport, Infocomm, media, security and emergency services and Government - to enhance the security of their critical information infrastructure systems.

The Smart Nation and Digital Government Group has also completed a scan of all government systems and found no evidence of compromise, he said.

There will be a pause in the introduction of new ICT systems in the interim, until their respective reviews have been completed and security posture established, it added.

"We cannot return to the days of paper and pencil but we will take a pause of our various IT-related projects ... to review and strengthen our cybersecurity measures if necessary, before proceeding," Mr Gan said, adding that this includes the National Electronic Health Record project.

There were no further details on which ICT projects will be paused, but these could possibly include SingPass Mobile, Channel NewsAsia understands.

"We will do our utmost to secure our IT systems. However, unfortunately, we cannot completely eliminate the risk of another cybersecurity attack," Mr Iswaran said at the conference. This is due to attackers constantly developing new techniques and probing for fresh weaknesses in IT systems.

"This is an ongoing battle ... however, we must not allow this incident, or any others like it, to derail our plans for a Smart Nation," he added.</s>Singapore — Hackers have stolen the health records of 1.5-million Singaporeans including Prime Minister Lee Hsien Loong, authorities said on Friday, with the leader specifically targeted in the city-state’s biggest ever data breach.

Singapore’s health and information ministries said a government database was broken into in a "deliberate, targeted and well-planned" strike, describing the attack as "unprecedented".

"Attackers specifically and repeatedly targeted the personal particulars and outpatient information of Prime Minister Lee Hsien Loong," health minister Gan Kim Yong told a press conference.

Forensic analysis by the Cyber Security Agency of Singapore "indicates this is a deliberate, targeted, and well-planned cyber-attack and not the work of casual hackers or criminal gangs".

Officials declined to comment on the identity of the hackers, citing "operational security", but said the prime minister’s data has not shown up anywhere on the internet.

"I don’t know what the attackers were hoping to find. Perhaps they were hunting for some dark state secret, or at least something to embarrass me," Lee wrote on Facebook. "My medication data is not something I would ordinarily tell people about, but there is nothing alarming in it."</s>In Singapore's worst cyber attack, hackers have stolen the personal particulars of 1.5 million patients, including the outpatient prescriptions of 160,000 people, including that of Prime Minister Lee Hsien Loong and a few ministers.

In what is believed to be a state-sponsored attack, the hackers infiltrated the computers of SingHealth, Singapore's largest group of healthcare institutions with four hospitals, five national specialty centres and eight polyclinics.

At a multi-ministry press conference on Friday (July 20), authorities said PM Lee's information was "specifically and repeatedly targeted".

The 1.5 million patients had visited SingHealth's specialist outpatient clinics and polyclinics from May 1, 2015 to July 4, 2018.

Their non-medical personal data that was illegally accessed and copied included their names, IC numbers, addresses, gender, race and dates of birth.

No record was tampered with and no other patient records such as diagnosis, test results and doctors' notes were breached. There was no evidence of a similar breach in the other public healthcare IT systems.

"This was a deliberate, targeted and well-planned cyberattack. It was not the work of casual hackers or criminal gangs," said a joint statement.

In the light of the attack, all of Singapore's Smart Nation plans including the National Electronic Health Record (NEHR) project - which enables the sharing of patients' treatment and medical data among hospitals here - have been put on hold.

Minister in Charge of Cyber Security S. Iswaran will convene a Committee of Inquiry (COI) to conduct an independent external review of the incident. Retired district judge Richard Magnus will chair the committee.

Initial investigations showed that one SingHealth front-end workstation was infected with malware through which the hackers gained access to the data base. The data theft happened between June 27, 2018 and July 4, 2018.

SingHealth has imposed a temporary Internet surfing separation on all of its 28,000 staff's work computers. Other public healthcare institutions will do the same.

Unusual activity was first detected on July 4 on one of SingHealth's IT databases, Security measures including the blocking of dubious connections and changing of passwords were taken to thwart the hackers. On July 10, the Health Ministry, SingHealth and the Cyber Security Agency of Singapore were informed after forensic investigations confirmed that it was a cyber attack. A police report was made on July 12.

No further data was stolen since July 4.

All patient records in SingHealth's IT system remain intact and there has been no disruption of healthcare services.

SingHealth will be contacting all patients who visited its specialist outpatient clinics and polyclinics from May 1, 2015 to July 4, 2018 to notify them if their data has been stolen. An SMS message will be sent to all patients over the next five days. Patients can also access the Health Buddy mobile app and SingHealth website to check if they are affected by the breach.

The Ministry of Health has directed a thorough review of the public healthcare system to improve cyber security and all public and private healthcare institutions have been advised to take cyber security precautions.</s>Singapore's government on Friday described the cyberattack on its public health system as "serious, unprecedented and massive."

A forensic probe launched by the city-state's Cyber Security Agency (CSA) found that hackers stole three years' worth of the personal data belonging to some 1.5 million people — including names, national identification numbers, addresses, genders, race and dates of birth.

Details of medicines prescribed to 160,000 of the 1.5 million affected patients were also stolen.

The investigation "indicates this is a deliberate, targeted, and well-planned cyberattack and not the work of casual hackers or criminal gangs," Singapore Health Minister Gan Kim Yong told a press conference.

According to authorities, hackers used a malware-infected computer to gain access to the database at some point between June 27 and July 4, before administrators spotted "unusual activity." However, officials insisted that records relating to patients' test results and diagnoses were not compromised.

Authorities also refused to comment on the identity of the hackers, citing "operational security."

Read more: Opinion: The new digital insecurity

According to officials, hackers were specifically trying to access the health records of Singapore Prime Minister Lee Hsien Loong, a two-time cancer survivor.

"Attackers specifically and repeatedly targeted the personal particulars and outpatient information of Prime Minister Lee Hsien Loong," Gan told reporters.

Lee took to Facebook following news of the data breach, saying he was not sure what the attackers were hoping to find.

Read more: Cybersecurity: Why it's 'hard to protect yourself' online

"I don't know what the attackers were hoping to find. Perhaps they were hunting for some dark state secret, or at least something to embarrass me," Lee wrote. "My medication data is not something I would ordinarily tell people about, but there is nothing alarming in it."

By Friday evening, the prime minister's medical data had not been made publicly available online.

The latest data breach is the largest to date on the wealthy, hyper-connected city-state. A separate cyberattack on the Defense Ministry in 2017 resulted in the theft of personal data belonging to around 850 national servicemen and employees.

Each evening at 1830 UTC, DW's editors send out a selection of the day's hard news and quality feature journalism. You can sign up to receive it directly here.</s>In the worst ever breach of personal data in Singapore, hackers have stolen information of 1.5 million patients, including that of Prime Minister Lee Hsien Loong, by infiltrating the computers of the country's largest health group, the authorities said on Friday.

The hackers infiltrated and stole the health records, including the outpatient prescriptions of 160,000 people, from the period between May 1, 2015 and July 4, 2018, they said.

The data theft happened between June 27 and July 4. However, the hackers did not amend or delete the records, the Ministry of Health and the Ministry of Communications and Information said in a joint statement.

The Patients' medical records, including past diagnosis, doctors' notes and health scans, were not affected, the release added.

The hackers specifically and repeatedly" targetted PM Loong's particulars, it said.

The data stolen included the patients' names, National Registration Identity Card numbers, address, gender, race and date of birth, the ministries said, adding that they have not found evidence of a similar breach in other public healthcare IT systems.

Earlier in the day, in a press conference, apologised to the affected patients, while Communications and Information Minister S Iswaran vowed to get to the bottom of the breach.

Calling the attack "unprecedented", Gan said, "We must learn from this and emerge stronger and more resilient from this incident.

Investigations by the Cyber Security Agency of (CSA) and the Integrated Health Information System (IHIS) confirmed that the attack was a deliberate, targeted and well-planned cyberattack and was not the work of casual hackers.

When asked which country might have been involved in the cyberattack, CSA chief executive David Koh refused to divulge any information due to "operational security reasons".

Unusual activity was first detected on one of SingHealth's IT databases on July 4. On July 10, the Health Ministry, higher officials of and CSA were informed about the cyberattack. SingHealth lodged a police complaint on July 12, the release said.

No further data has been stolen since July 4, it said, adding that there was no disruption of healthcare services during the period of the cyberattack and patient care has not been compromised.

Meanwhile, the Minister-in-charge of Cybersecurity, S Iswaran, today convened a Committee of Inquiry (CoI) into the incident.

In the wake of the attack, the introduction of new ICT systems in the country's healthcare system has been put on hold till respective reviews are completed and security posture established.

"While we will do utmost to secure our IT systems from attack, unfortunately, we cannot completely eliminate the risk of another attack...However, we must not allow this incident, or any others like it, to derail our plans for a Smart Nation," the ministries said in the release.</s>Hackers have stolen the health records of 1.5 million Singaporeans including Prime Minister Lee Hsien Loong, authorities said on Friday, with the leader specifically targeted in the city state’s biggest ever data breach.

Singapore’s health and information ministries said a government database was broken into in a “deliberate, targeted and well-planned” strike, describing the attack as “unprecedented”.

“Attackers specifically and repeatedly targeted the personal particulars and outpatient information of Prime Minister Lee Hsien Loong,” health minister Gan Kim Yong told a press conference.

Forensic analysis by Singapore’s Cyber Security Agency “indicates this is a deliberate, targeted, and well-planned cyberattack and not the work of casual hackers or criminal gangs,” he added.

Officials declined to comment on the identity of the hackers, citing “operational security”, but said the prime minister’s data has not shown up anywhere on the internet.

“I don’t know what the attackers were hoping to find. Perhaps they were hunting for some dark state secret, or at least something to embarrass me,” Lee wrote on Facebook. “My medication data is not something I would ordinarily tell people about, but there is nothing alarming in it.”

Hackers used a computer infected with malware to gain access to the database between June 27 and July 4 before administrators spotted “unusual activity”, authorities said.

The compromised data includes personal information and medication dispensed to patients, but medical records and clinical notes have not been affected, the health and communications ministries said.

“Health records contain information that is valuable to governments,” said Eric Hoh, Asia-Pacific president of cybersecurity firm FireEye. “Nation states increasingly collect intelligence through cyberespionage operations which exploit the very technology we rely upon in our daily lives.”

Earlier this month, the US National Intelligence Director Dan Coats described Russia, China, Iran and North Korea as the “worst offenders” when it came to attacks on American “digital infrastructure”.

Some hackers have in the past offered stolen data and software for sale online.

Wealthy Singapore is hyper-connected and on a drive to digitise government records and essential services, including medical records which public hospitals and clinics can share via a centralised database.

But authorities have put the brakes on these plans while they investigate the cyberattack. A former judge will head a committee looking into the incident.

While the city state has some of the most advanced military weaponry in the region, the government says it fends off thousands of cyberattacks every day and has long warned of breaches by actors as varied as high-school students in their basements to nation states.

In his Facebook post about the attack, Lee warned that “those trying to break into our data systems are extremely skilled and determined. They have huge resources, and never give up trying.”

Following the announcement, Singapore’s cybersecurity agency has also put out two advisories advising web administrators and members of the public to protect personal data. This included complex instructions to secure website domains and just simply watching out for suspicious information requests.

A new Cybersecurity Act passed earlier this year requires those providing essential services – including government, health care and security – to secure their web infrastructure and report any major incidents.

In 2017, hackers broke into a defence ministry database, stealing the information of some 850 army conscripts and ministry staff.</s>SINGAPORE - Hackers have stolen health records belonging to 1.5 million Singaporeans, including Prime Minister Lee Hsien Loong who was specifically targeted in the "unprecedented" attack, authorities said on Friday.

In the biggest data breach in the city-state's history, a government database was broken into in a "deliberate, targeted and well-planned" strike, the health and information ministries said in a joint statement.

The "deliberate, targeted and well-planned," attack aimed at patients who visited clinics between May 2015 and July 4 this year, the Health Ministry said in a statement.

"It was not the work of casual hackers or criminal gangs," the ministry said, adding that the attackers targeted details about Lee and the medicines he received.

"The attackers specifically and repeatedly targeted Prime Minister Lee Hsien Loong’s personal particulars and information on his outpatient dispensed medicines," it said.</s>SINGAPORE: Hackers have stolen the health records of 1.5 million Singaporeans including Prime Minister Lee Hsien Loong, authorities said Friday, with the leader specifically targeted in the city-state´s biggest ever data breach.

Singapore's health and information ministries said a government database was broken into in a "deliberate, targeted and well-planned" strike, describing the attack as "unprecedented". "Attackers specifically and repeatedly targeted the personal particulars and outpatient information of Prime Minister Lee Hsien Loong," health minister Gan Kim Yong told a press conference. Forensic analysis by Singapore's Cyber Security Agency "indicates this is a deliberate, targeted, and well-planned cyber attack and not the work of casual hackers or criminal gangs," he added.</s>SINGAPORE, July 20 — In the biggest and most serious cyberattack yet on Singapore, hackers last month broke into SingHealth’s IT systems to steal the data of 1.5 million patients and records of the outpatient medication given to Prime Minister Lee Hsien Loong, the authorities said today.

“The attackers specifically and repeatedly targeted Lee’s personal particulars and information on his outpatient dispensed medicines,” the Ministry of Health (MOH) and Ministry of Communications and Information (MCI) said in a joint press statement.

Lee had fought off cancer twice, and was given a clean bill of health after he abruptly took ill during the National Day Rally in August 2016. In May 2015, Lee was given the all-clear for prostate cancer after undergoing surgery in February that year to remove his cancerous prostate gland. He had a previous bout with cancer in 1992, when he had suffered from intermediate grade malignant lymphoma.

Commenting on the attack, Lee wrote in a Facebook post that the hackers were “extremely skilled and determined”, and had “huge resources, and never give up trying”.

He added: “I don’t know what the attackers were hoping to find. Perhaps they were hunting for some dark state secret, or at least something to embarrass me.

“If so, they would have been disappointed. My medication data is not something I would ordinarily tell people about, but there is nothing alarming in it.”

The hackers — whom the authorities did not name and whose intentions were not spelled out — took data such as the name, NRIC number, address, gender, race, and date of birth of 1.5 million patients who visited SingHealth’s specialist outpatient clinics and polyclinics from May 1 2015 to July 4 this year.

The records of the medicines given to 160,000 people — the Prime Minister among them — who had received outpatient treatment at SingHealth’s outlets were also stolen.

The data was stolen over a one-week period from June 27 to July 4. “The Cyber Security Agency’s (CSA) investigations have established that the attack was deliberate, targeted and carefully planned. It was not the work of casual hackers or criminal gangs,” MCI said in a separate statement.

Police investigations are ongoing. There have been growing concerns in recent years over the proliferation of state-sponsored cyberattacks aimed at both multinationals as well as governments.

MOH and MCI assured Singaporeans that the affected data had not been tampered with. “No other patient records, such as diagnosis, test results or doctors’ notes, were breached. We have not found evidence of a similar breach in other public healthcare IT systems,” they added in the joint statement.

MCI said that the Smart Nation and Digital Government Group had completed a scan of all government systems and “found no evidence of compromise”. The authorities will meanwhile suspend the roll out of new information and communications technology systems while a security review of government systems is conducted.

Citing the “serious public health and safety implications” triggered by the incident, MCI said Minister-in-charge of Cybersecurity S Iswaran would convene a Committee of Inquiry (COI), chaired by retired Senior District Judge Richard Magnus, into the matter, and look into measures to better secure public sector IT systems in future.

The hackers first broke into SingHealth’s IT system via a front-end workstation, and later managed to obtain log-in details to assess the database, according to CSA’s investigations.

The data was later found to have been stolen over a one-week period from June 27 to July 4, though database administrators at the Integrated Health Information Systems (IHiS), the Health Ministry’s IT arm, did not detect signs of unusual activity until July 4.

Upon detecting the intrusion, IHiS investigators “acted immediately to halt the activity...while putting in place additional cyber security precautions,” MOH and MCI said.

Six days later, on July 10, the investigators confirmed that SingHealth’s systems had come under a cyberattack, and informed the relevant parties. SingHealth lodged a police report on July 12.

The hackers did not stop after they were detected, according to the authorities, who said they detected “further malicious activities” as monitoring efforts were stepped up. However, the hackers did not manage to steal more data after July 4.

“All patient records in SingHealth’s IT system remain intact,” MOH and MCI said. “There has been no disruption of healthcare services during the period of the cyberattack, and patient care has not been compromised.”

Meanwhile, additional measures have been taken to beef up the security of SingHealth’s IT systems. These include measures for separate computers to access the Internet, the resetting of user and system accounts, additional monitoring controls, and tighter controls on workstations and servers.

“Similar measures are being put in place for IT systems across the public healthcare sector against this threat,” the authorities added.

SingHealth will begin contacting the affected patients from Friday via SMSes. They can also check if their data has been compromised by going to the SingHealth website, or by using the Health Buddy mobile app.

The IHiS has been instructed to work with external experts to conduct a thorough review of Singapore’s public healthcare system in order to better prevent or detect future cyber attacks. The review will cover areas like cybersecurity policies, threat management processes, IT system controls, among others.

“The Government takes a serious view of any cyberattack, illegal access of data or action that compromises the confidentiality of data in Singapore,” MOH and MCI said in their joint statement. — Today</s>Hackers breached the Singapore government’s health database with a “deliberate, targeted and well-planned” cyberattack, accessing the data of about 1.5 million patients, including Prime Minister Lee Hsien Loong, for almost a full week.

The cybercriminals initially breached a front-end workstation to gain privileged account credentials to obtain privileged access into the database. Officials said they detected unusual activity on July 4, but the hack began on June 27.

The investigation found the hackers didn’t tamper with the records, rather they exfiltrated the data. Officials said the attack was well-planned, and it wasn’t the work of “casual hackers or criminal gangs.”

According to the official statement, hackers targeted clinical visits between May 1, 2015, and July 4, 2018. All patients who visited SingHealth’s outpatient clinics and polyclinics during that time period were included in the breach. Patient care was not disrupted during the attack.

The stolen data contained demographic information and patient identification numbers. Medical information like diagnoses and test results weren’t included. However, for 160,000 patients, including the prime minister, the hackers stole data on outpatient-dispensed medications.

Upon discovery, officials said they immediately worked to stop further unauthorized access and notified authorities to investigate. During that time, the hackers continued their attempts to access the system. But all suspicious activity ended on July 4.

Since the attack, the health system has tightened up its security measures, which included temporarily “imposing internet surfing separation.” Officials said they’ve also increased controls on workstations and servers, reset user and systems accounts, and installed additional system monitoring controls.

“Similar measures are being put in place for IT systems across the public healthcare sector against this threat,” officials said. “The Ministry of Health has directed [the health system] to conduct a thorough review of our public healthcare system, with support from third-party experts, to improve cyber threat prevention, detection and response.”

“Areas of review will include cybersecurity policies, threat management processes, IT system controls, and organizational and staff capabilities,” officials said. “Advisories have been sent to all healthcare institutions, public and private, on the cybersecurity precautions and measures to be taken.”

The government’s minister in charge of cybersecurity will be establishing an inquiry committee to externally review the cyberattack. While Singapore doesn’t fall under HIPAA, it’s breach serves as a strong reminder that countries and government health services continue to be targeted by hackers.

Atlanta’s government systems went down for several days after a targeted cyberattack, while Germany’s network was attacked by hackers who targeted the private network of the interior minister.

Just this year, the U.S. and U.K. found the Russian government was behind the global Petya attack in June 2017. The wiper malware destroyed the IT systems of several major companies like FedEx and Merck, but also several U.S. health systems that had to replace entire networks to recover.
Hackers steal the personal data of 1.5 million Singaporeans through the national public health care system. Officials say Prime Minister Hsien Loong Lee's data is the target of the breach.