U Mobile denies breach, says data likely from 2014 incident

PETALING JAYA: U Mobile denied it suffered a data breach based on preliminary investigations after a database purportedly containing the information of four million customers was posted for sale on a hacking forum on Monday (July 17).

“U Mobile acknowledges the recent allegations of a data breach. Our preliminary investigations indicate that there was no breach to our current systems.

“From our early assessments, the data in question is suspected to be from the 2014 Malaysian data breach, which was previously reported to the authorities in 2017,” it said in a statement.

The alleged data breach in 2014, which was reported in 2017, leaked the information of 46.2 million mobile numbers from various telcos.

On July 17, a user on a hacking forum listed the database, claiming that it includes personally identifiable information such as names, addresses, MyKad numbers, and mobile phone numbers, for US$5,000 (RM23,380).

U Mobile said it will continue to work with the relevant authorities on the recent incident and provide updates.

“We wish to reassure our customers that we are committed to data security and will continue to enhance the security of our systems to protect their data,” it said.