Duopharma Biotech Bhd has detected an unauthorised attempt to access its information technology infrastructure, with preliminary investigations indicating that a set of files, potentially including personal data, was exfiltrated.
The pharmaceutical group said its internal cyber defence systems detected the incident and immediately activated containment measures.
Duopharma said its core corporate network and internal operational systems remain secure and fully functional, with no disruption to its core business activities.
The incident is significant given Duopharma’s role as a major domestic pharmaceutical manufacturer and supplier to Malaysia’s public healthcare system. The group has several ongoing contracts to supply pharmaceutical products, including insulin, to Ministry of Health (MOH) facilities.
The company did not indicate that the cyber incident had affected manufacturing, medicine supplies or deliveries to government healthcare facilities.
Duopharma said its investigation had found that a set of data files had been extracted from its systems without authorisation.
The files allegedly included personal data, although the company has yet to establish the exact scope or nature of the information involved.
Duopharma said it will work with internal and external cybersecurity specialists, where applicable, to conduct a digital forensic investigation to determine the extent of the breach.
Its cybersecurity environment will also be reviewed, with additional safeguards to be implemented if necessary to strengthen protection of the group’s systems and data.
The company said that based on information currently available, it believes the incident has no financial implications, although it will continue assessing the potential impact as the investigation progresses.
Duopharma also intends to notify the Personal Data Protection Commissioner within the prescribed timeframe over the alleged exfiltration of personal data.
