Doctor Anywhere data breach

What happened

Singapore telemedicine and clinic group Doctor Anywhere said on November 6, 2026 that users' personal data leaked in a malicious cyber incident involving unauthorized access by an unknown third party. In an email to affected customers it said it learned of the breach on October 29 and that names, email addresses, identity card and passport numbers, dates of birth, emergency contact details and bank account details were compromised. It says clinical records, passwords, payment card details and ID document images were not affected, and it has not said how many people are involved. Members whose corporate health benefits are run by its subsidiary Adept Health are among those affected; the breach was reported to Singapore's Personal Data Protection Commission and the police.

What should I do?

1. Watch the bank account you gave Doctor Anywhere for unfamiliar debits and tell your bank right away about anything you don't recognize.
2. Be wary of calls or messages that quote your NRIC or passport number to sound official; banks and government agencies won't ask for OTPs or passwords.
3. Let your emergency contacts know scammers may contact them pretending to be from a clinic or about a medical emergency.
4. Use Singpass and your bank's app to check for accounts or loans opened in your name, and report misuse to the police.

More data breaches in Singapore →

Check the other services you use →