- Joined
- Jul 17, 2017
- Messages
- 1,960
- Points
- 83
SINGAPORE - A server exploited by hackers to ultimately reach SingHealth's critical system, leading to Singapore's worst data breach in June, had not received the necessary security software updates for more than a year.
Servers are typically patched several times a month.
This server became one of the many pathways hackers exploited, as it fell through the cracks of Integrated Health Information Systems' (IHiS) oversight, the Committee of Inquiry (COI) heard on Thursday (Sept 27).
At the COI hearing into the breach, Mr Tan Aik Chin, a senior manager of cancer service registry and development at the National Cancer Centre Singapore (NCCS), testified that he became the "convenient" custodian of the server in question.
On paper, he was not supposed to manage the server, but he had been doing so in practice since 2014.
More at Exploited server in SingHealth cyber attack did not get security update for 14 months, COI finds