The personal data of up to 4,064 staff at public healthcare institutions and community care providers may have been accessed after someone gained unauthorised access to a system used by the Agency for Integrated Care (AIC).
AIC disclosed the incident on Thursday (12 November 2026). The staff details that may have been accessed include NRIC numbers, phone numbers, email addresses and names. AIC said it had found no indication that patient data or medical records were compromised, and said the incident did not affect any other systems.
AIC Restored the Care Planning System on 12 November
AIC detected the unauthorised access to its Advance Care Planning system on 10 November and took it offline that day as a precaution. The system was back online on 12 November.
Trained facilitators use the system to help people record how they want to be cared for in the future. These plans can guide loved ones and healthcare teams if a person later cannot make or communicate their own care decisions. AIC advised facilitators to use paper forms while the system was offline.
AIC filed a police report on 10 November and alerted the Cyber Security Agency of Singapore. It said it was still investigating and would review its systems and work with the cybersecurity agency to strengthen its defences. The Personal Data Protection Commission told The Straits Times it was contacting AIC for more information.
What Staff Can Do
AIC said it would contact everyone who might have been affected within three days of its 12 November statement. It advised staff to watch for suspicious calls, texts and emails, and to keep personal details, passwords and one-time passwords private if they cannot verify who is asking.
Anyone who thinks they might be affected can call AIC at 1800-650-6060 or email [email protected].
The Ministry of Health said on 12 November that the AIC incident was among six recent cybersecurity incidents involving healthcare or healthcare-related organisations. It said the incidents had not disrupted patient care and that it was following up with the organisations to assess the full impact.
