According to minister Fahmi Fadzil, the ministry’s investigation team, consisting of the Department of Personal Data Protection (JPDP) and CyberSecurity Malaysia (CSM), began discussions regarding the incident with Capital A, AirAsia’s parent company, on 1 December. Initial investigations indicate that the company’s server system was indeed accessed by an unauthorised party on 12 November with the potential for data leaks.

π’πˆπ€π’π€π“π€π πŠπ„πŒπ„ππ“π„π‘πˆπ€π πŠπŽπŒπ”ππˆπŠπ€π’πˆ 𝐃𝐀𝐍 πƒπˆπ†πˆπ“π€π‹ πŠπ„ 𝐀𝐓𝐀𝐒 πƒπ€πŠπ–π€π€π πˆππ’πˆπƒπ„π πŠπ„π“πˆπ‘πˆπ’π€π 𝐃𝐀𝐓𝐀 ππ„π‘πˆππ€πƒπˆ ππ„ππ”πŒππ€ππ† 𝐃𝐀𝐍 πŠπ€πŠπˆπ“π€ππ†π€π π€πˆπ‘π€π’πˆπ€ pic.twitter.com/N37gti52Nk β€” KKMM (@kkmm_gov) December 10, 2022 Following the discussions, Capital A has been instructed to turn over any documents and computerised data related to the case. Fahmi stressed that further investigations will be conducted to track down the source of the breach in addition to assessing the overall impact of the incident. We won’t know anything else for a while as the minister stated that no further details of the case would be revealed while investigations are ongoing, as to avoid legal implications and disrupting the investigation. Fahmi added that all data usersΒ should constantly monitor and improve aspects of cybersecurity from time to time by ensuring that system infrastructure, databases, and networks are updated and secure. Daixin, in an interview with DataBreaches.net, said that it actually reached out to AirAsia and received a response. The amount of the ransom wasn’t revealed, though the group mentioned that the carrier had no intention of paying up to delete the data. Daixin’s representative lamented AirAsia’s disorganised network, stating that they would not repeat the attack due to the chaos and lack of standards. The company confirmed the cyberattack in a statement a few days later but did not disclose how much personal data exactly was stolen.

Communications And Digital Ministry Begins Investigation Into AirAsia Personal Data Leak - 69