CTOS Cyber Incident Puts Credit-Data Resilience Under Investor Scrutiny

Kuala Lumpur, 23 September 2026 – CTOS Digital has detected and contained unauthorised access to an environment supporting its consumer business, with some processed consumer information affected and a limited subset of credit-reporting services temporarily unavailable. The company said other operations continued normally and that, based on facts available at the time of disclosure, it did not expect a material financial impact.

The incident puts renewed attention on the resilience of Malaysia’s credit-data infrastructure. CTOS has engaged an independent incident-response team, notified the relevant authorities and begun strengthening cybersecurity controls in line with forensic findings. The company described the affected material as certain data files involving a limited subset of information, but the episode will be judged on the completeness and speed of subsequent disclosure.