Breaches and incidents

CTOS Digital (Malaysia): unauthorised access to consumer-business environment, credit services partly offline

In a Bursa Malaysia announcement dated 23 Sep, CTOS said it detected “unauthorised access to a specific environment supporting its consumer business” and...

Disclosed
Verification
Checked against a primary source

What happened

  • In a Bursa Malaysia announcement dated 23 Sep, CTOS said it detected “unauthorised access to a specific environment supporting its consumer business” and that “certain data files containing a limited subset of processed consumer information were accessed.”
  • Root cause: not disclosed.
  • No attacker named.
  • CTOS contained the environment, engaged an independent incident response team, notified authorities, took a subset of credit reporting services temporarily offline for remediation, and reported no material financial impact.