Fullerton Health said on Saturday (14 November) that a data breach involving its enrolment portal for migrant workers compromised about 140,000 work pass holder records. About 43,000 of those records belonged to people whose work passes were no longer valid.
What Data May Have Been Exposed
Fullerton Health said it discovered the breach on 31 October after a server supporting its Migrant Worker Primary Care Plan was accessed without authorisation. It notified the Ministry of Manpower (MOM) on 2 November and disclosed the breach publicly on 9 November. It also notified the Personal Data Protection Commission and filed a police report.
The company’s preliminary investigation found that workers’ names, Foreign Identification Numbers (FINs), birth dates, mobile numbers, email addresses and home addresses may have been exposed. Fullerton Health said the compromised data contained no health, medical or personal financial information.
Workers Can Still Get Medical Care Under the Plan
MOM and Fullerton Health said workers can continue to get medical care under the Primary Care Plan. The plan covers common healthcare needs for eligible migrant workers. Employers must buy it for certain Work Permit and S Pass holders, including those who work in construction, marine shipyards or the process sector.
Fullerton Health said it isolated the affected server after discovering the breach and is building a new one to host the enrolment portal.
The company said it sent two rounds of notices to affected workers through their employers. MOM also alerted workers directly in their own languages through its FWMOMCare app. Fullerton Health urged workers to be cautious if they receive unexpected calls, texts or emails asking for personal information.
