It appears that a computer belonging to SingHealth, one of the state's two major government healthcare groups, was infected with malware through which the hackers gained access to the database.
From today’s news. And that’s how it happens folks. They don’t go after the computer with the data, they go after the computers with access to the computers with the data.