SINGAPORE - The Ministry of Health (MOH) said on Friday (April 24) that it has suspended one of its officers after she allegedly leaked the number of new daily coronavirus cases in Singapore and retrieved a Covid-19 patient's records without authorisation.
The 35-year-old civil servant is a Singaporean woman and was arrested under the Official Secrets Act (OSA) and Computer Misuse Act, the police said on Thursday.
The MOH added that it is now reviewing its processes to ensure that the necessary information security protocols are in place.
"The officer has been suspended from work while police investigations are ongoing, and no longer has access to the ministry's confidential information," the ministry said in its statement.
"Confidential information relating to Covid-19 cases is placed in a secured server that is only accessible by a restricted group of officers who require the information for their work. The officer had authorised access to the information as required for her work, but had allegedly used the access for other unauthorised purposes."
The police said on Thursday that they received a report on the incident on April 16 at 7.43pm from a member of the public that the number of daily confirmed cases of Covid-19 in Singapore for that day had been leaked on an Instagram story post. This was even though the MOH had not officially released the figure.
Preliminary investigations found that the MOH officer had shared the number of new Covid-19 cases for April 16 - which was 728 - with members of an online private WeChat group who were not authorised to receive the classified information.
The members of the group then disseminated the information before the MOH officially released the announcement in its daily update.
Further investigations found that the woman had shared the daily Covid-19 case figures with the WeChat group on several other occasions.
The MOH officer had also accessed a government Covid-19 database without authorisation to retrieve confidential records of a patient who tested positive for the virus, and gave the information to her friend.
The police are investigating the case.
Those found guilty of wrongful communication of information under the OSA can be fined up to $2,000 and jailed for up to two years.
The police also warned that unauthorised recipients should not further circulate the confidential information received, as they may be similarly liable under the OSA.
If found guilty of unauthorised access to computer materials under the Computer Misuse Act, the woman can be fined up to $5,000 and jailed for up to two years.