UPDATE ON CYBERSECURITY

• intellicareadmin
• May 16, 2023

May 15, 2023

Consistent with our obligation to keep our stakeholders informed, we issue this update to confirm a data breach which affected several well-known companies across the globe, including Intellicare. Threat actors, known as CL0P, exploited a zero-day vulnerability found in Intellicare’s third-party tool called GoAnywhere Managed File Transfer Solution (GoAnywhere MFT). Independent forensic investigation revealed the theft of limited amount of information, which did not include contact details, medical information and government issued numbers. We have already appraised the National Privacy Commission in accordance with the reporting requirements of the Data Privacy Act of 2012. Notifications were also sent to the data subjects. Any data subject who wishes to check if he/she was affected by the breach may verify here:

Intellicare – Data Check Portal

Although the breach was unforeseeable, Intellicare has demonstrated its preparedness to respond to cybersecurity threats of this magnitude. Our Security Team has demonstrated its commitment to uphold privacy by diligently working to determine and contain the breach. As part of our measures to further strengthen our security, we have deployed Multifactor Authentication Protocols for all our systems, initiated the retraining on privacy and cybersecurity of all our employees, and engaged with experts to conduct information security assessments. Our commitment to invest in the latest technologies and in the skills of our people to ensure effective and prompt surveillance of cybersecurity threats was significantly reinforced by this event.

At Intellicare, the privacy and security of our employees, members, and clients are taken seriously. We will remain vigilant and proactive with a firm assurance to protect the data entrusted to us by implementing security protocols that meet global standards.

For any other questions or concerns, you may also reach us at dpo@intellicare.net.ph.

Yours sincerely,

INTELLICARE DATA PRIVACY OFFICE & INFORMATION SECURITY RISK OFFICE

UPDATE ON REPORTED CYBER INCIDENT

• intellicareadmin
• April 5, 2023

April 5, 2023

We disclosed last 29 March 2023 the inclusion of Intellicare in a list of companies around the globe potentially affected by a zero-day vulnerability found in one of our third-party tools, GoAnywhere Managed File Transfer, a product of our vendor Fortra. Prior to such disclosure, we have already activated our Security Incident and Data Breach Response Plan and disconnected the tool from our systems. Report to the National Privacy Commission was also filed and the vendor, Fortra, was asked to provide clarification on the matter.

Based on our latest information, we remain confident of the safety of our members and employees. Here is what we know and what we did so far:

1. There is still no demonstrable proof to suggest that customer data has been exfiltrated.

2. To augment the capacities of our information security team and as part of our continuing investigation, we have engaged Mandiant, a global cyber security leader, who, as of this time, is conducting an independent forensic investigation. The purpose is to assess the entire Intellicare environment and to ensure the safety of our systems as part of our efforts in improving our security posture in light of recent events.

3. Apart from other measures we do not disclose for strategic reasons, we have implemented a forced password reset for all our members and employees across our different portals following our standard security protocols. Please monitor your access to our portals as we move towards service recovery.

4. Prior to being notified of our inclusion in the list of companies targeted by CLOP, we have deployed on 7 February 2023 the necessary patch designed to resolve the vulnerability in the GoAnywhere tool, as recommended by Fortra.

As a privacy conscious organization, the security of data – Clients and our own – is and will always be a priority. Please accept our sincerest appreciation for your understanding as we endeavor to know more about the situation. We will provide updates as necessary. To reiterate, a dedicated support team has also been deployed. You may email us at dpo@intellicare.net.ph.

STATEMENT ON REPORTED CYBER INCIDENT

• intellicareadmin
• March 29, 2023

March 29, 2023

We received on 27 March 2023 unverified information of Intellicare being included in the list of companies across the globe targeted by a hacker group known as CLOP/CL0p. According to various sources, this group took advantage of a zero-day vulnerability found in GoAnywhere Managed Transfer Solution, a tool owned by a third-party service provider, Fortra, and used by many companies in the Philippines and abroad. Intellicare has this tool.

We take these reports very seriously, thus, the prompt activation of our Security Incident and Data Breach Response Plan to thoroughly investigate this matter. We are coordinating already with Fortra, simultaneous with the disconnection of GoAnywhere from our systems as early as Monday, 27 March 2023.

At this time, we have no evidence suggesting a breach has occurred nor is there demonstrable proof that customer data has been exfiltrated. We are taking every measure to protect your data and we have strengthened further our security protocols to safeguard our systems with the help of our third-party information security experts. We have also deemed it important to report this incident voluntarily with the National Privacy Commission.

We will continue to monitor the situation closely and provide updates as necessary. A dedicated support team has also been deployed. You may email us at dpo@intellicare.net.ph.

May we further seek your patience and understanding as we learn more about the situation.

Intellicare partners with UnionBank to open fully digital ePaycard accounts for affiliated doctors

• intellicareadmin
• May 31, 2021

Manila, Philippines, May 31, 2021 – Asalus Corporation (operating under the trade name “Intellicare”), one of the country’s leading health maintenance organization (HMO), recently partnered with Union Bank of the Philippines (UnionBank), renowned as the “best digital bank” in the country, for the ePaycard Digital Account Opening (eDAO) of its affiliated doctors to help speed up the disbursement of their professional fees, benefits, and other reimbursements. A virtual signing ceremony was held last May 14, 2021 to formalize the partnership agreement.

UnionBank offers an account opening facility that is efficient, paperless, and with a fully digital disbursement solution for the convenience of Intellicare affiliated doctors. To facilitate the opening of their accounts, the doctors will receive an SMS with a unique reference code which will be used to continue the application via the UnionBank Online App. Account opening will be a fully digital process which can be made at the doctor’s own time and convenience. Upon Intellicare’s approval, the ePaycard accounts will be opened real time.

The doctors’ ePaycard accounts will automatically be enrolled in UnionBank Online and will be able to do digital transactions like Fund Transfer, Bills Payment, Save up for Goals, Split Bills, Buy Load, and many more.

UnionBank and Intellicare will be providing communication materials and hosting online onboarding sessions and webinars to educate the doctors on the features and benefits of eDAO and how to secure their online bank accounts.  

Mary Joyce S. Gonzales, Executive Vice-President and Retail Banking Center Head of UnionBank, stated: “The COVID-19 pandemic has pushed all of us to innovate. With restrictions on movement and the need for contactless payment to reduce exposure to the virus, the Bank has made it its goal to aid companies and its employees in making the disbursement process more efficient, convenient, and safe for all those involved in the transaction.”

Audrey Meldy B. Gallardo, Executive Vice-President of Intellicare, remarked: “It is Intellicare’s desire to always consider the best for our partner doctors and medical facilities to ensure the efficient flow in the supply chain.  This payment facility of UnionBank is an enabler for us to meet our commitments to them in the best way possible amid the challenges of less physical contact in managing the pandemic.”