Singapore Academy of Medicine doctor data leaked on dark web
Learn More
In Singapore, the personal information of approximately 50 doctors affiliated with the Academy of Medicine, Singapore (AMS), which includes prominent figures in the medical field, has surfaced on the Dark Web. This incident has been attributed to the LockBit ransomware group and has been ongoing since Sunday. The affected individuals comprise both local and foreign doctors, encompassing AMS directors, educators, and students undergoing advanced specialized training within Singapore.
A comprehensive 13.69GB database, has revealed sensitive personal data, including
- NRIC (National Registration Identity Card) numbers
- residential addresses.
- login credentials for AMS' social media accounts
- staff directory that includes mobile phone numbers.
The staff contact information was last updated in May, while an earlier version from 2019, labeled "To be deleted," is also present.
Within this database, a 2021 contract can be found, detailing recipients' home addresses, along with letters granting lifetime fellowships to members over 65 who have maintained at least 10 years of membership. These letters are dated March 23, 2022, and a majority of them disclose the recipients' residential addresses.
Another folder within the database contains letters from Brunei's Public Service Department, outlining allowances for seven Bruneian doctors undergoing specialist training in Singapore.
AMS confirmed that its servers fell victim to a ransomware attack, which was initially discovered on July 13. Lockbit 3.0, made the stolen data available on the Dark Web for free on a Sunday at 4.41 am.
In response to the breach, AMS promptly took its servers offline and initiated a series of immediate measures, including the engagement of cybersecurity and legal experts to assess and reinforce its cybersecurity infrastructure. Simultaneously, investigations into the incident were ongoing.
