HIV data leak

On 28 January 2019, sensitive information including names, identification numbers, phone numbers, addresses and HIV test results of 12,400 HIV-positive people were leaked online due to mishandling of the information by then-staff member, Ler Teck Siang.^[4] Ler, who was the head of National Public Health Unit at MOH at the time, had access to the information and had not complied comply with Ministry of Health's security guidelines. Ler downloaded the information on to a personal thumb drive, which his then-boyfriend Mikhy K Farrera Brochez had leaked online subsequently.^[5] Minister of Health, Gan Kim Yong, explained that data leak had not been announced earlier, so as to safeguard the patients' well-being.^[6][7]

Community Health Assist Scheme computer system error

On 16 February 2019, MOH released a public statement admitting that there had been an error in computer systems managed by NCS that were used in relation to the Community Health Assist Scheme (CHAS). The error resulted in a miscalculation of the amount of health care subsidies applicants were eligible to receive through means-testing, such that approximately 1,300 people received lower subsidies and 6,400 people received higher subsidies.

The first discrepancy in a result of a CHAS card holder was detected on 24 September 2018 by MOH. NCS was informed immediately. NCS had initially attributed the issue to intermittent network connection problems. Between 9 October 2018 and 2 November 2018, another 5 more cases involving discrepancies were detected, prompting the launch of a more in-depth investigation. In November 2018, NCS traced the cause of the discrepancies to a software version issue used on a server used by the system. The identified issue occurred during a migration of the system to another government data center in September 2018. The software version issue was resolved as part of other changes made to address an unrelated performance issue on 10 October 2018. However, incorrect results that had been generated between 18 September 2018 and 10 October 2018 remained in the system.

Remedial actions were then carried out by MOH and NCS to assess impact on the affected applicants. MOH announced that it would work with grant scheme administrators and healthcare institutions to follow up with notifications and reimbursement to the affected applicants. According to media reports, MOH intended to recover costs and expenses arising from this incident from NCS as MOH was entitled to pursuant to the contract between the parties.^[8]