Last updated
CTOS Digital Bhd: Cybersecurity Incident
CTOS Digital's credit reporting environment was accessed by an unauthorised party (announced 23 Sept), exposing a limited subset of consumer data. CTOS Score and CCRIS-related services remain offline pending independent validation; Kenanga estimates FY26 core net profit could fall by RM22 million if outage runs to end-December, and it downgraded the stock.
Source: discovered:nst.com.my
- Who
- CTOS Digital Bhd · Malaysia
- What happened
- CTOS Digital's credit reporting environment was accessed by an unauthorised party (announced 23 Sept), exposing a limited subset of consumer data. CTOS Score and CCRIS-related services remain offline pending independent validation; Kenanga estimates FY26 core net profit could fall by RM22 million if outage runs to end-December, and it downgraded the stock.
- When
- 2026-10-14
- Source
- discovered:nst.com.my
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For CTOS Digital Bhd in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: MitchelLake's Talent Market Index sits at 97.6 (Neutral), down 3.4 on the prior month; Asia hiring signal is running rising (+4.2pts).
CTOS Digital Bhd: 1 signal in the last 90 days.
MitchelLake in this thematic
More signals across Asia
Cybersecurity Incident · Asia
Prabang →South Korean crypto exchange Prabang suffered a $70,000 hot-wallet breach, one of the recent security incidents prompting South Korea's move to allow crypto withdrawal freezes during hacking threats.
Cybersecurity Incident · Asia
Financial Security Institute (FSI) →South Korea's Financial Security Institute, the state-run cyber auditor for registered crypto businesses, confirmed hackers broke into the online portal financial firms use to submit security-audit paperwork. Stolen files may include firms' answers to FSI security assessments; regulators are still assessing what was taken.
Cybersecurity Incident · Asia
Sogo →Hong Kong department store Sogo disclosed unauthorised access to its systems, potentially exposing personal data of up to 820,000 loyalty members. Authorities were alerted about abnormal data access in its membership system about a week before disclosure.
Cybersecurity Incident · Asia
Chow Sang Sang →Hong Kong jeweller Chow Sang Sang disclosed a separate data breach in which unauthorised parties accessed its systems and potentially exposed customer personal information.
Cybersecurity Incident · Asia
Unocoin →Indian crypto exchange Unocoin has an ongoing user lockout and is flagging outgoing BitGo ETH transactions, which points to a possible security failure or unauthorised asset movement.
Cybersecurity Incident · Asia
SPH Media →SPH Media disclosed a data breach affecting about 9% of its customer database. The source says payment card, financial, banking and customer account access data were not impacted.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Executive Search: Asia →
Our Asia practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗