UPDATE: U Mobile released a statement confirming that the sample posted on a forum on July 16 is old data from 2014.
“The sample also corresponds to breached data from the incident reported in 2017 that involved leakages of personal information of over 46 million users across various Malaysian organisations, dating back to 2014.
“Once again, U Mobile confirms no evidence of unauthorised access into our database was found. We are confident that our data is secure, and we would like to assure our customers that we put the utmost importance on cybersecurity and extensive measures are taken to safeguard our customers’ data," it said.
PETALING JAYA: U Mobile denied it suffered a data breach based on preliminary investigations after a database purportedly containing the information of four million customers was posted for sale on a hacking forum on Monday (July 17).
"U Mobile acknowledges the recent allegations of a data breach. Our preliminary investigations indicate that there was no breach to our current systems.
“From our early assessments, the data in question is suspected to be from the 2014 Malaysian data breach, which was previously reported to the authorities in 2017," it said in a statement.
The alleged data breach in 2014, which was reported in 2017, leaked the information of 46.2 million mobile numbers from various telcos.
On July 17, a user on a hacking forum listed the database, claiming that it includes personally identifiable information such as names, addresses, MyKad numbers, and mobile phone numbers, for US$5,000 (RM23,380).
U Mobile said it will continue to work with the relevant authorities on the recent incident and provide updates.
"We wish to reassure our customers that we are committed to data security and will continue to enhance the security of our systems to protect their data," it said.