PHP Vulnerability Responses by Company

Fullerton Healthcare Group Pte. Limited

Companies / web services
Aliases / services
Fullerton Health Singapore / Fullerton Healthcare / フラートン・ヘルス / Fullerton Healthcare Group Pte. Limited
Official website
https://www.fullertonhealth.com/sg/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Singapore appointment and customer data held by vendor Agape

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

The PDPC decision dated 23 March 2023 confirms unauthorized access to data of 156,900 customers in an Agape online-drive breach discovered in October 2021; the exact exfiltrated volume was unknown. Fullerton’s own systems were not affected. Its 23 June 2023 statement reports completion of remedial steps.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check affected fields in your individual notice, watch for phishing and never share an OTP. If bank details were involved, review transactions and contact your bank. The historical six-month monitoring offer is not presented as currently available.

Official service URL

Source URLs

  1. Official operator identityhttps://www.pdpc.gov.sg/-/media/Files/PDPC/PDF-Files/Commissions-Decisions/GD_Fullerton-Healthcare-Group-and-Agape-CP-Holdings_230323.pdfService and operation documentation
  2. Vendor incident and customer FAQhttps://www.fullertonhealth.com/sg/third-party-information-breach-incident/Service and operation documentation
  3. Remediation statement, 23 June 2023https://www.fullertonhealth.com/sg/statement-by-fullerton-health-in-response-to-the-straits-timess-article-fullerton-health-and-vendor-fined-68k-in-total-over-data-leak-in-2021/Service and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryOperator and scope checked against the document.
  2. PDPC decision, 23 March 2023Official notice; link to this PHP incident unconfirmedOperator and scope checked against the document.
  3. Vendor incident and customer FAQOfficial notice; link to this PHP incident unconfirmedOperator and scope checked against the document.
  4. Remediation statement, 23 June 2023Official notice; link to this PHP incident unconfirmedOperator and scope checked against the document.

Comments