[UPDATE: 26 Jan 2024 – 8:15pm] Screenshots of the forum post has been included in the article. Certain details have been blurred intentionally.
[Original Story: 26 Jan 2024 – 7:54pm]
A user on a forum known for trading information from data breaches has recently alleged that they have successfully stolen the complete customer database of Telekom Malaysia (TM), The Star reports. The claim, posted on the forum on 24 January 2023, suggests that the pilfered data comprises nearly 200 million entries, with “nearly 20 million effective user data”.
To add credence to their claim, the user shared what are purported to be screenshots of TM’s customer database architecture documentation, spanning 161 pages and detailing the structure, design, and functionality of the company’s database system. Alongside these are samples of the alleged customer data, featuring personal details such as names, MyKad numbers, addresses, phone numbers, salary ranges, occupation, religious beliefs, and marital statuses.
In the same post, the user is offering to sell the stolen data back to TM first, assuring that it will not be made available to other parties should the deal succeed. The amount demanded for the ransom was not disclosed and as of writing, TM itself has yet to provide a response – let alone an official statement regarding the matter.
This latest incident comes on the heels of the company’s previous data breach which occurred in July of last year, affecting Unifi customer information. Even prior to that, TM also experienced a breach in December 2022 which impacted over 250,000 Unifi Mobile customers.
(Source: The Star)
