Probe on massive data breach to be completed soon

KUALA LUMPUR: The authorities have identified several potential sources of one of the largest data breaches in the country, said Communications and Multimedia Minister Datuk Seri Salleh Said Keruak.

The investigation into the massive data leak – involving 46.2 million mobile numbers from at least 12 local mobile phone and mobile virtual network operators – will be completed soon, Salleh told reporters at Parliament here yesterday.

The breach also includes private information of more than 80,000 individuals leaked from the records of the Malaysian Medical Council, Malaysian Medical Association and Malaysian Dental Association.

On Tuesday, Malaysian Communications and Multimedia Commission (MCMC) chief operating officer Mazlan Ismail was quoted by Bernama as saying that the regulator had met local telecommunications companies to seek their cooperation in the probe.

As a safeguard against scammers who may try to trick further vital information out of their targets using data from the leak, security experts urged the public to be vigilant when handling phone calls and messages from strangers.

They advised users not to be tricked into giving out more personal details, transferring funds or installing applications that may contain malware or spyware.

Deputy Inspector-General of Police Tan Sri Noor Rashid Ibrahim said Bukit Aman’s Commercial Crime Investigation Department (CCID) has been tasked with investigating the leak in cooperation with the MCMC.

“It is not easy and very technical, so we need time to investigate thoroughly.

“We are working with the MCMC and are also looking into all telcos involved,” he told a press conference after attending a Deepavali open house held at the Kuala Lumpur police headquarters.

Asked if the leak could have come from a telco, he said it was premature to make such a conclusion.

“We are looking at all aspects, including those who have access (to the data).

“There are bad hats everywhere and maybe the one who leaked it took advantage of his access,” he said.

Data leak: Vital information in the wrong hands can pose a major security threat.