CTOS Digital Bhd has disclosed a cybersecurity incident involving unauthorised access to an environment supporting its consumer business, with certain consumer information accessed during the breach.
The credit reporting agency said its cybersecurity system detected the intrusion and immediately activated response protocols to contain the affected environment.
CTOS said it subsequently appointed an independent incident response team to conduct a comprehensive forensic investigation.
Based on the assessment received so far, the company said the incident was confined to the identified environment, with no other systems affected.
The investigation found that certain data files containing a limited subset of processed consumer information had been accessed.
CTOS did not disclose the number of consumers affected or the specific categories of information involved.
The company said a subset of its credit reporting services is temporarily unavailable while remediation measures are being completed.
However, its other business operations and services continue to function normally.
CTOS said its systems remain secure and operational, adding that the incident is not expected to have a material financial impact based on information currently available.
The company is reviewing and strengthening its cybersecurity measures in line with the findings of the independent forensic investigation.
CTOS has also notified the relevant authorities and said it would issue further announcements should there be any material developments.
