CTOS Digital has detected unauthorised access to a system supporting its consumer business, with a limited subset of processed consumer information accessed.
The company disclosed that it had contained the affected system and appointed an independent incident response team to conduct a forensic investigation in a Bursa Malaysia filing.
Based on the assessment received so far, the incident was limited to the identified system and did not affect other environments.
CTOS added that its systems remain secure and operational.
The investigation found that certain data files containing processed consumer information had been accessed.
CTOS did not disclose how many consumers were affected or what type of information was involved.
A portion of its credit reporting services is temporarily unavailable while remediation work continues. Other operations and services remain unaffected.
Based on the information currently available, CTOS does not expect the incident to have a “material financial impact”.
The company has notified the relevant authorities and is reviewing its cybersecurity controls following the independent forensic assessment.
CTOS said it will provide further updates if there are any material developments.
Featured image: Edited by Fintech New Malaysia, based on images by CTOS, and Magnific
