4 ms·
> given the story and that workers from the company were banned from internet usage I think the internet ban only happened after the fact. From the ST article
by ValentineC 8y ago
> given the story and that workers from the company were banned from internet usage
I think the internet ban only happened after the fact. From the ST article linked in the BBC article [1], it seems like the attack vector was malware installed on one computer:
> Initial investigations showed that one SingHealth front-end workstation was infected with malware through which the hackers gained access to the data base. The data theft happened between June 27, 2018, and July 4, 2018.
[1] https://www.straitstimes.com/singapore/personal-info-of-15m-singhealth-patients-including-pm-lee-stolen-in-singapores-most https://www.straitstimes.com/singapore/personal-info-of-15m-...
- azernik 8y ago> I think the internet ban only happened after the fact. That's exactly GP's point - that part of the response was to ban internet usage indicates that employee internet usage was part of the attack vector. (i.e. that one computer was probably infected through social-engineering means)