3 ms·

We have no details, but given the story and that workers from the company were banned from internet usage, it sounds like it was a mix of technical and social e

• ValentineC 8y ago
  > given the story and that workers from the company were banned from internet usage I think the internet ban only happened after the fact. From the ST article linked in the BBC article [1], it seems like the attack vector was malware installed on one computer: > Initial investigations showed that one SingHealth front-end workstation was infected with malware through which the hackers gained access to the data base. The data theft happened between June 27, 2018, and July 4, 2018. [1] https://www.straitstimes.com/singapore/personal-info-of-15m-singhealth-patients-including-pm-lee-stolen-in-singapores-most https://www.straitstimes.com/singapore/personal-info-of-15m-...
  • azernik 8y ago
    > I think the internet ban only happened after the fact. That's exactly GP's point - that part of the response was to ban internet usage indicates that employee internet usage was part of the attack vector. (i.e. that one computer was probably infected through social-engineering means)