CTOS has detected unauthorised access involving one of its consumer-related systems, with the company saying a portion of consumer data stored in the affected system may have been accessed.
The credit reporting company said the incident was detected recently and has since been contained to a specific system environment.
CTOS said it immediately activated its cybersecurity response procedures after detecting the unusual activity and brought in an independent cybersecurity team to conduct a full forensic investigation.
Based on the investigation so far, the incident has not affected its other systems, which remain secure and operational. However, some data files within the affected environment were accessed, involving a limited amount of processed consumer information.
Some credit report services temporarily unavailable
CTOS said it is currently carrying out remediation work and strengthening its cybersecurity measures based on findings from the forensic investigation.
As a result, some credit report services are temporarily unavailable, although its other businesses and services continue to operate as usual. The company has also notified the relevant regulators and law enforcement authorities about the incident.
CTOS said the cybersecurity incident is not expected to have a material financial impact on the company at this stage. It added that the situation will continue to be monitored, with further announcements to be made should there be any material developments.
Najib’s daughter also joining CTOS board
Meanwhile, CTOS has announced another development involving its leadership, with lawyer Putri Norlisa Najib, the daughter of former prime minister Datuk Seri Najib Razak, set to join the company’s board as an independent non-executive director from Sept 25.
The 45-year-old has spent more than two decades working in law, particularly in banking and finance, and is currently a joint managing partner at Adnan Sundra & Low.
Putri Norlisa started her career in London before returning to Malaysia and joining the local legal profession. Over the years, her work has included areas such as corporate financing, debt restructuring, mergers and acquisitions, joint ventures and capital markets.
She also has law degrees from the University of Nottingham and is a member of the Malaysian Bar.
As part of her new role, she will sit on several CTOS committees covering areas including risk and compliance, nominations and remuneration, and employee share options. Her only other directorship, according to CTOS, is with charitable organisation Noah Foundation, where she serves as an alternate director.
The company said it remains committed to strengthening its cybersecurity measures and maintaining its compliance and corporate governance standards as it works through the ongoing incident.
Follow Wah Piang for more
