Cyber Incident Victim: Singapore Red Cross
Date:
May 2019
Location:
Singapore
Summary
The Singapore Red Cross suffered a cyberattack involving unauthorized access to a section of its website, compromising personal data of 4,297 potential blood donors. Exposed information included names, blood types, and contact numbers. This incident occurred amid a series of high-profile cyberattacks targeting the digitally advanced nation, following a prior large-scale breach of health records. The organization confirmed the compromise but did not disclose specific details about the attackers or the exact method of intrusion.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On May 8, 2019, unauthorized individuals gained access to a section of the Singapore Red Cross (SRC) website, compromising the personal data of 4,297 potential blood donors. The breach exposed donors' names, blood types, and contact numbers. The SRC publicly disclosed the incident on May 16, 2019, confirming the intrusion occurred nine days earlier. This marked another significant cybersecurity incident in Singapore, a nation recognized for its advanced digital infrastructure that had experienced multiple high-profile attacks in preceding years. The compromised data specifically affected individuals who had registered as potential donors through the organization's online platform. No medical records or financial information were reported as exposed in this breach.
The Singapore Red Cross did not specify the exact method of intrusion or duration of unauthorized access in its public statement. The organization acknowledged the breach as part of Singapore's ongoing cybersecurity challenges, referencing the 2018 SingHealth incident where 1.5 million citizens' health records were stolen. While the SRC confirmed the compromise of donor information, no details were provided about whether the data appeared in underground forums or was used maliciously. The disclosure highlighted persistent vulnerabilities in Singapore's digital ecosystem despite its technological sophistication, with healthcare-related organizations appearing particularly targeted. This incident represented the second major breach of medical-related data in Singapore within a twelve-month period.