Doctor Anywhere / Adept Health: unauthorized access hit corporate-benefits PII (IDs, bank details); Income Insurance notifies policyholders
- Scope caveat: neither Income nor Doctor Anywhere has published a total affected-person count in the statements we checked.
- Not claimed exposed (per customer emails reported by Straits Times / company lines): passwords, login credentials, payment cards, ID-document images.
- Defender takeaway: third-party benefits administrators that mirror employee identity + bank fields are high-value IdP-adjacent targets — inventory who holds your staff NRIC/bank data outside HRIS.
Sources: Income Insurance: Adept Health Cyber Incident (Nov 6) · CNA: M1 and Doctor Anywhere hit by data breaches (Nov 6) · The Straits Times: Doctor Anywhere hit by data breach (Nov 6)