A Singapore hospital has apologised after an event invitation exposed the identities of patients tied to a hereditary cancer syndrome.
The National Cancer Centre Singapore sent a mailing on September 18 about a “Living with HBOC” event, referring to hereditary breast and ovarian cancer, a condition that can affect both men and women. Instead of hiding recipients with the blind-copy field, staff used the ordinary carbon-copy field, so every address on the list was visible to everyone who received it.
The list carried names, contact details and, for some people, their workplaces. Roughly 467 recipients were on it, according to local reporting, while one person who spoke to The Straits Times estimated the figure was higher and described the number of visible addresses as too many to count. The centre has since apologised.
What raises the stakes is the subject matter. Hereditary breast and ovarian cancer runs in families, so an exposed address can hint not only at one patient’s condition but at the risk carried by their relatives, including people who never signed up for any mailing.
For health systems, the lapse is a plain reminder that mailing-list mechanics are a privacy control. A single wrong field in an email tool can disclose far more about a patient population than many technical breaches, and it can trigger notification duties and regulatory scrutiny even when no system was compromised.
