Statement on third-party cyber incident

Cigna Healthcare Singapore (“Cigna”) has been informed of a cyber incident at Alliance Medinet Pte. Ltd (“Alliance Medinet”), its third-party service provider, affecting several insurers in Singapore. The incident involves the personal data of some members covered under Cigna’s Cigna Care Connect solution. This issue is limited to Alliance Medinet’s systems and Cigna’s platforms have not been impacted in any way. Cigna has notified regulatory authorities, policyholders and affected individuals. There is no disruption to customers’ health insurance coverage or to the processing of their claims.

Alliance Medinet reported unauthorised access to its membership database which has impacted Cigna’s insured members. In Cigna’s notification to each affected individual, we have already identified the specific data relating to the individual which had been compromised on account of the incident. Generally, for most of the affected individuals, the data included names, personal identification numbers and contact information. Based on initial assessment, certain health data of only 1 individual was compromised. Apart from this case, no other health data nor medical records of any affected individual are at risk.

Alliance Medinet has informed Cigna that it has taken measures to contain the incident, and investigations are ongoing. It has engaged independent cybersecurity and forensic specialists and put in place 24-hour network monitoring and dark web monitoring systems. Cigna is working closely with the Service Provider on its investigation.

Customers should remain vigilant for suspicious calls, emails or messages, avoid clicking on unfamiliar links or sharing passwords or one-time passcodes, and verify any unexpected requests with us at customersupport@cignahealthcare.com.