Bank Rakyat says ‘possible data infringement’ has been contained


The bank claimed that its proactive measures allowed it to contain the potential data infringement. — Image by freepik

PETALING JAYA: In a statement today (Sept 3), Bank Rakyat claimed that it had addressed a “possible data infringement incident that may involve some customer information”.

It claimed that its proactive measures allowed it to contain the potential data infringement.

However, it’s unclear what the bank means by a “possible data infringement”. It did not state if any information was stolen or if its system was actually breached. LifestyleTech has reached out to Bank Rakyat for clarification.

“The Bank is committed to transparency and have (sic) notified customers accordingly. In the meantime, we strongly advise customers to remain vigilant against phishing tactics and other potential threats,” it added.

Yesterday (Sept 2), customers took to social media to complain about a message sent via SMS from Bank Rakyat that stated: "There is a possibility of data-related issues detected in our system. The security level and system improvements are actively being enhanced/carried out. If you experience any problems or notice any suspicious transactions, please contact the Bank Rakyat Call Centre immediately.”

“In response to the infringement, Bank Rakyat reported the incident to the relevant authorities. The Bank assures its customers, business partners and stakeholders that all business operations remain fully functional,” it said.

It said customers who suspect suspicious activities should immediately call Bank Rakyat's Contact Centre at 1300 800 800 or 03-5526 9200, or the National Scam Response Centre at 997.

The Cybersecurity Act 2024 (Act 854) took effect on Aug 26, requiring 11 NCII (National Critical Information Infrastructure) sectors including government, banking and finance, and transportation to report any cybersecurity incidents to the National Cyber Coordination and Command Centre (NC4) within six hours of discovery.

Additionally, the authorised representative of the NCII entity must submit further details within 14 days via the NC4 System, including the number of affected hosts, attack techniques used, and the incident's impact.

Follow us on our official WhatsApp channel for breaking news alerts and key updates!
   

Next In Tech News

Bankman-Fried lieutenant builds fraud detection tool for prosecutors
US labor board bans mandatory anti-union meetings in ruling against Amazon
Cisco raises annual revenue forecast as AI spurs networking tools demand
Musk's X taps former Tubi executive Banki as CFO
Meta to introduce ads on Threads in early 2025, the Information reports
AMD to cut 4% of global workforce as it focuses on AI chip development
California's only nuclear plant to use AI to help comply with new licensing challenges
Bitcoin rises above $90,000 on Trump euphoria
Crypto legislation likely coming under Trump, ex-SEC chief says
Amazon launches low-cost ecommerce service in US to challenge Temu

Others Also Read