COI probe into SingHealth cyber attack to hold first hearing on Aug 28

The COI was convened on July 24 to inquire into the events and contributing factors leading to the cyber-security attack on SingHealth, which is Singapore's worst ever. ST PHOTO: SYAMIL SAPARI

SINGAPORE - The Committee of Inquiry (COI) looking into Singapore's worst cyber attack, the breach of patient data at public hospital cluster SingHealth, will hold its first hearing on Aug 28.

The first hearing will be held in camera but all hearings will be held in public unless the evidence presented could affect national security or patient confidentiality, said the committee secretariat in a press release.

The COI, headed by former chief district judge and current member of the Public Service Commission Richard Magnus, will call expert witnesses to give evidence on cybersecurity measures and hygiene. It will receive public submissions and will advise the public when and how these submissions should be submitted.

The secretariat said Solicitor-General Kwek Mean Luck has been designated by the Attorney-General to lead evidence in the inquiry into the cyber breach, which had compromised the personal particulars of about 1.5 million patients, including Prime Minister Lee Hsien Loong's personal and outpatient prescriptions data.

At the first pre-inquiry conference on Tuesday (Aug 7) Mr Kwek informed the COI that the Public Prosecutor has appointed an investigation team to be led by the Cyber Security Agency (CSA) and supported by the Criminal Investigation Department (CID) to investigate any matter relevant to the inquiry.

The Solicitor-General said that some aspects of the investigations have been completed and that the Attorney-General Chambers will be ready to lead evidence from the first witness.

The AGC has taken part in leading evidence in past COI hearings, such as the probe into the riot that broke out in Little India in December 2013.

The COI, which was convened on July 24, held its first administrative meeting on July 25, the same day when Mr Magnus met Mr Kwek and discussed the appointment of investigators to assist the COI..

The COI will visit SingHealth to be briefed on the network architecture of the affected IT systems and the cybersecurity measures in place before the cybersecurity attack that took place between June 27 and July 4.

The other COI members are executive chairman of cyber security solutions firm Quann World, Mr Lee Fook Sun; group chief operating officer of healthcare technology firm Sheares Healthcare Management, Mr T.K. Udairam; and assistant secretary-general of the National Trades Union Congress, Ms Cham Hui Fong.

Join ST's WhatsApp Channel and get the latest news and must-reads.