CTOS Digital detects unauthorised access to environment, limited consumer data accessed

CTOS Digital said a subset of the company’s credit reporting services is temporarily unavailable as it completes the necessary remediation measures. ― SoyaCincau pic

First Published: Wednesday, 23 Sep 2026 2:42 PM MYT

Last Modified: Wednesday, 23 Sep 2026 2:43 PM MYT

KUALA LUMPUR, Sept 23 — CTOS Digital Bhd has detected unauthorised access to a specific environment supporting its consumer business.

In a filing with Bursa Malaysia today, the credit reporting agency said the cybersecurity incident involved access to certain data files containing a limited subset of consumer information.

The filing said its cybersecurity monitoring systems detected the unauthorised access. The company immediately activated the necessary protocols and successfully contained the affected environment.

It has engaged an independent incident response team to conduct a comprehensive forensic investigation, CTOS Digital said.

“Based on the investigation’s assessment received to date, the incident has been contained within the identified environment.

“The company’s systems remain fully secure and functional, and no other environments were impacted,” it said. 

It added that the company is continuously reviewing its cybersecurity protocols and strengthening its cybersecurity posture in accordance with the independent forensic report.

CTOS Digital said a subset of the company’s credit reporting services is temporarily unavailable as it completes the necessary remediation measures.

“The company’s other business operations and services continue to operate and function normally,” it said. There is no material financial impact on the company, it said.

It has notified the relevant authorities and will continue to monitor the situation. It will announce material developments, CTOS Digital said.

“The board assures shareholders, customers, business partners and other stakeholders that the company remains committed to conducting its business in a responsible, transparent and compliant manner,” it added.  — Bernama