COI first hearing on August 28 to investigate SingHealth cyberattack

To examine the events and factors leading to the cyberattack on the public healthcare cluster SingHealth, the Committee of Inquiry (COI) will hold its first hearing on August 28.

“All hearings will be held in public, unless the information presented could affect national security, such as where the evidence may be exploited for further cyberattacks or where patients' personal data may be revealed. In such cases, the hearing will be held in camera,” said COI Secretariat in a press release.  

The Committee of Inquiry (COI) will make a site visit to SingHealth to be briefed on the network architecture of the affected IT systems. Photo courtesy: SingHealth
The Committee of Inquiry (COI) will make a site visit to SingHealth to be briefed on the network architecture of the affected IT systems. Photo courtesy: SingHealth

However, the first hearing on August 28 will be held in camera. 

During the course of the hearing, expert witnesses will be called to give evidence on cybersecurity measures.

COI will also make a site visit to SingHealth to be briefed on the network architecture of the affected IT systems.

"The COI will also receive public submissions and will advise the public when and how these submissions should be submitted," said the press release. 

The Attorney General of Singapore has chosen Solicitor-General Kwek Mean Luck to lead evidence in the inquiry.

The Government appointed a four-member COI on July 24 to look into the cyberattack on SingHealth. The Committee is chaired by retired chief district judge Richard Magnus.

Other three members of the COI are Lee Fook Sun, executive chairman of cybersecurity solutions firm Quann World, T K Udairam, group chief operating officer of healthcare technology firm Sheares Healthcare Management and Cham Hui Fong, assistant secretary-general of the National Trades Union Congress.

COI is investigating Singapore’s worst cyberattack, which took place between June 27 and July ,and which the Government announced on July 20.

Sophisticated hackers breached the database of SingHealth and stole the personal data of 1.5 million patients. Of the patients affected, 160,000 of them including Prime Minister Lee Hsien Loong also had information on their outpatient medication stolen.

The first pre-enquiry of COI was held yesterday during which the Solicitor-General informed the members of the Committee that the Public Prosecutor has appointed an investigation team led by the Cyber Security Agency.

The agency will be supported by the Criminal Investigation Department in investigating any matter relevant to the inquiry.

“The Solicitor-General also indicated that some aspects of the investigations had been completed and that AGC will be ready to lead evidence from the first witness,” said the COI Secretariat.