Hacker alleges to have stolen Telekom Malaysia’s customer database with ‘nearly 20 million effective user data’ (Updated with TM’s statement)


Telekom Malaysia’s headquarters and campus in Cyberjaya. Previously, the company disclosed that it suffered a data breach affecting a select number of customers back in July 2023. — AZHAR MAHFOF/The Star

Update: TM released a statement claiming that it had received a ransom note recently, which had prompted “an immediate and thorough investigation to verify these claims”.

It claims that its investigation has shown “that the alleged materials is pre-processed, recycled and dated”.

“Nonetheless, we are treating the situation with the utmost seriousness and are dedicated to resolving this issue with high urgency,” it said.

It also said that it has engaged the relevant authorities, lodged a police report, and is continuously fortifying its cyber defences and bolstering its resilience against such threats.

PETALING JAYA: A user on a notorious forum known for trading information obtained from data breaches alleged that he has stolen the complete customer database of Telekom Malaysia.

The user posted on Jan 24 claiming that the data contains nearly 200 million entries, with “nearly 20 million effective user data”.

Additionally, the user provided screenshots purporting to be the company’s customer database architecture documentation, with 161 pages outlining the structure, design, and functionality of the company’s customer database system.

Samples of alleged customer data obtained from the breach – which include details such as name, MyKad numbers, address, phone number, salary range, work, religious beliefs, and marital status – were also shared.

The user is offering to sell the data to Telekom Malaysia first, claiming that it won’t be sold to others after that.

LifestyleTech has reached out to TM for comments.

Previously, the company disclosed that it suffered a data breach affecting a select number of customers back in July 2023.

It said Unifi customers’ personal information – including names, MyKad/passport numbers, and contact details – was leaked in the data breach, but no financial information was impacted.

In December 2022, the company confirmed that a data breach affected 250,248 Unifi Mobile customers.

Follow us on our official WhatsApp channel for breaking news alerts and key updates!
   

Next In Tech News

Is tech industry already on cusp of artificial intelligence slowdown?
What does watching all those videos do to kids' brains?
How the Swedish Dungeons & Dragons inspired 'Helldivers 2'
'The Mind Twisting Quadroids' review: Help needed conquering the galaxy
Albania bans TikTok for a year after killing of teenager
As TikTok runs out of options in the US, this billionaire has a plan to save it
Google offers to loosen search deals in US antitrust case remedy
Is Bluesky the new Twitter for teachers in the US?
'Metaphor: ReFantazio', 'Dragon Age', 'Astro Bot' and an indie wave lead the top video games of 2024
Opinion: You can pay for white noise, but you don’t need to

Others Also Read