State actors were likely behind Singapore’s biggest-ever cyberattack to date, security experts said, citing the scale and sophistication of the hack.
Hackers broke into a government database and stole the health records of 1.5 million Singaporeans, including Singaporean Prime Minister Lee Hsien Loong (李顯龍), who was specifically targeted in the “unprecedented” attack, the city-state announced on Friday.
The strike was “a deliberate, targeted and well-planned cyberattack and not the work of casual hackers or criminal gangs,” Singaporean Minister for Health Gan Kim Yong (顏金勇) said.
While officials refused to comment on the identity of the hackers citing “operational security,” experts told reporters that the complexity of the attack and its focus on high-profile targets such as the prime minister pointed to the hand of a state actor.
“A cyberespionage threat actor could leverage disclosure of sensitive health information ... to coerce an individual in [a] position of interest to conduct espionage” on its behalf, said Eric Hoh, Asia-Pacific president of cybersecurity firm FireEye.
Hoh told national broadcaster Channel NewsAsia that the attack was an “advanced persistent threat.”
“The nature of such attacks is that they are conducted by nation states using very advanced tools,” he said. “They tend to be well-resourced, well-funded and highly sophisticated.”
Healthcare data is of particular interest to cyberattackers, because it can be used to blackmail people in positions of power, said Jeff Middleton, CEO of cybersecurity consultancy Lantium.
“A lot of information about a person’s health can be gleaned from the medications that they take,” Middleton told reporters yesterday.
“Any nonpublic health information could be used for extortion. Russian spy services have a long history of doing this,” Middleton added.
Medical information, such as personal data, can also be easily monetized on criminal forums, Darktrace Asia-Pacific managing director Sanjay Aurora said.
“Beyond making a quick buck, a more sinister reason to attack would be to cause widespread disruption and systemic damage to the healthcare service — as a fundamental part of critical infrastructure — or to undermine trust in a nation’s competency to keep personal data safe,” he told reporters.
Wealthy Singapore is hyper-connected and on a drive to digitize government records and essential services, including medical records, which public hospitals and clinics can share via a centralized database.
However, authorities have put the brakes on these plans while they investigate the cyberattack.
A former judge is to head an inquiry into the incident.
The hackers used a computer infected with malware to gain access to the database between June 27 and July 4 before administrators spotted “unusual activity,” authorities said.
Taiwan has experienced its most significant improvement in the QS World University Rankings by Subject, data provided on Sunday by international higher education analyst Quacquarelli Symonds (QS) showed. Compared with last year’s edition of the rankings, which measure academic excellence and influence, Taiwanese universities made great improvements in the H Index metric, which evaluates research productivity and its impact, with a notable 30 percent increase overall, QS said. Taiwanese universities also made notable progress in the Citations per Paper metric, which measures the impact of research, achieving a 13 percent increase. Taiwanese universities gained 10 percent in Academic Reputation, but declined 18 percent
BULLY TACTICS: Beijing has continued its incursions into Taiwan’s airspace even as Xi Jinping talked about Taiwan being part of the Chinese family and nation China should stop its coercion of Taiwan and respect mainstream public opinion in Taiwan about sovereignty if its expression of goodwill is genuine, the Ministry of Foreign Affairs (MOFA) said yesterday. Ministry spokesman Jeff Liu (劉永健) made the comment in response to media queries about a meeting between former president Ma Ying-jeou (馬英九) and Chinese President Xi Jinping (習近平) the previous day. Ma voiced support for the so-called “1992 consensus,” while Xi said that although the two sides of the Taiwan Strait have “different systems,” this does not change the fact that they are “part of the same country,” and that “external
UNDER DISCUSSION: The combatant command would integrate fast attack boat and anti-ship missile groups to defend waters closest to the coastline, a source said The military could establish a new combatant command as early as 2026, which would be tasked with defending Taiwan’s territorial waters 24 nautical miles (44.4km) from the nation’s coastline, a source familiar with the matter said yesterday. The new command, which would fall under the Naval Command Headquarters, would be led by a vice admiral and integrate existing fast attack boat and anti-ship missile groups, along with the Naval Maritime Surveillance and Reconnaissance Command, said the source, who asked to remain anonymous. It could be launched by 2026, but details are being discussed and no final timetable has been announced, the source
SHOT IN THE ARM: The new system can be integrated with Avenger and Stinger missiles to bolster regional air defense capabilities, a defense ministry report said Domestically developed Land Sword II (陸射劍二) missiles were successfully launched and hit target drones during a live-fire exercise at the Jiupeng Military Base in Pingtung County yesterday. The missiles, developed by the Chungshan Institute of Science and Technology (CSIST), were originally scheduled to launch on Tuesday last week, after the Tomb Sweeping Day holiday long weekend, but were postponed to yesterday due to weather conditions. Local residents and military enthusiasts gathered outside the base to watch the missile tests, with the first one launching at 9:10am. The Land Sword II system, which is derived from the Sky Sword II (天劍二) series, was turned