MOH Apologises For ‘Preventable Lapse’ Behind 9.5-Hour Public Healthcare IT Outage
Singapore’s Ministry of Health (MOH) has apologised for a nine-and-a-half-hour disruption to public healthcare IT systems on 13 October, describing the incident as a “preventable lapse”.
Senior Minister of State for Health Tan Kiat How addressed the incident in Parliament on 3 November, explaining that the outage was caused by an incomplete security update by a contracted service provider rather than a cyberattack.
The disruption affected all three public healthcare clusters, namely NHG Health, National University Health System (NUHS) and SingHealth.
According to Tan, the incident disrupted several essential healthcare services, including appointment bookings, visitor registration, medication dispensing and billing.
Around 4,000 Outpatient Appointments Rescheduled
The outage had a significant impact on patients and healthcare operations.
Approximately 4,000 outpatient appointments had to be rescheduled, while some patients experienced delays of up to two hours.
Tan explained that the problem stemmed from a required security update to a shared Domain Name System (DNS) service.
The update, which was the responsibility of a contracted service provider engaged by Synapxe, Singapore’s national HealthTech agency, was not completed before a scheduled global change.
As a result, public healthcare systems relying on the affected DNS service experienced disruptions.
Synapxe Reviewing Service Provider’s Responsibilities
Although Synapxe had appointed an external provider to manage the update, Tan stressed that the agency remained accountable for the resilience of Singapore’s critical healthcare IT systems.
Synapxe is now reviewing the provider’s contractual obligations and will take appropriate action.
It is also strengthening its monitoring and fault diagnosis capabilities to enable faster recovery when similar disruptions occur.
Tan added that public healthcare systems had backup infrastructure, including two data centres. However, both depended on the same DNS service and security configuration, meaning the backup arrangements were also affected.
Hospitals Activated Manual Procedures During Outage
During the disruption, healthcare institutions activated their downtime procedures to maintain essential operations.
Additional staff were deployed to support healthcare workers, who relied on selected read-only patient records and manual workflows to continue providing services.
MOH confirmed that no adverse patient safety incidents were attributed to the outage.
Government Strengthening Healthcare IT Resilience
Tan said the Government was taking steps to improve the resilience of public healthcare systems in three key areas.
These include improving the tracking and verification of critical technical changes to prevent similar incidents, reducing shared system dependencies to limit the impact of future disruptions, and strengthening backup arrangements to ensure continuity of patient care.
Healthcare institutions will also improve their downtime systems, staff readiness and conduct regular exercises to prepare for potential IT outages.
Separately, Synapxe has appointed an expert panel to review the investigation findings and proposed corrective measures, while identifying further areas for improvement.
Tan concluded by emphasising the need to make healthcare technology more reliable while ensuring medical professionals can continue caring for patients safely, even when IT systems fail.