Doctor Anywhere hit by data breach, clinical records ‘not affected’

Doctor Anywhere said personal data belonging to its users was leaked in a malicious cyber incident involving unauthorised access by an unknown third party. The breach matters because the company has not yet disclosed how many people were affected or what personal information was exposed, though it says clinical records were not affected.

The provider said it engaged cybersecurity firm Ensign InfoSecurity to investigate and help strengthen its systems. Ensign validated security fixes by 30 October 2026 and confirmed the identified vulnerabilities had been secured; Doctor Anywhere has also notified Singapore’s data protection commission and filed a police report. Affected users and organisations working with its Adept Health subsidiary are being informed, while services remain operational.