A little knowledge. A safer digital life.PRIVACY FIRST. PLAIN ENGLISH ALWAYS.
CyberUnpackedSearch ↗
HomeNewsAlliance Medinet breach exposes data of about 110,000 members
News

Alliance Medinet breach exposes data of about 110,000 members

Alliance Medinet disclosed a breach affecting about 110,000 members. Here is the confirmed scope, insurer response, and what members should check.

By CyberUnpacked · · 2 min read
Singapore skyline illuminated at night with colourful reflections across the water
File photo: Singapore skyline, photographed in 2013 by Erwin Soo / Wikimedia Commons, under CC BY 2.0. Resized; previews may be cropped. Used for location context, not as a photograph of Alliance Medinet or the breach.

Alliance Medinet says a breach of its membership database compromised personal data belonging to approximately 110,000 members. Parent company Alliance Healthcare Group disclosed the incident in an October 24 filing to the Singapore Exchange.

What information was affected?

The company said a third party gained unauthorized access to the system holding the database. Potentially affected information includes names, identification numbers and contact details. Its initial assessment also found possible exposure of bank account information for seven members and a medical diagnosis for one member.

Those last two figures describe specific potential exposures. They do not mean financial or medical details were exposed for all 110,000 members.

Why insurance customers are receiving alerts

CNA reported that customers of HSBC Life, Income Insurance and Singlife were among those affected or potentially affected. The insurers said there was no evidence that their own systems had been compromised. A breach at a service provider can therefore lead to notifications from an insurer even when the insurer’s own network was not breached.

What the company is doing

Alliance said affected members were being notified through Medinet, partners and relevant clients. It engaged independent cybersecurity and forensic specialists, introduced continuous network and dark-web monitoring, and reported the incident to Singapore’s Personal Data Protection Commission on October 21. Investigations were continuing at the time of the filing.

What members should check

Read your own notification carefully to see which information applies to you. Avoid treating someone else’s letter or a broad news headline as a complete description of your exposure.

Use your insurer’s official app or an existing contact number to verify unexpected messages. A caller knowing your name or identification details is not proof that they work for your insurer. Never disclose a password or one-time sign-in code in response to an unsolicited request.

Our phishing message checklist explains the warning signs to look for.

Sources

Reporting checked October 26, 2026. Sources: Alliance Healthcare Group’s October 24 SGX announcement and attached statement; CNA’s reporting on affected insurance customers.