The Credit Counselling and Debt Management Agency (AKPK) said approximately 20 customers have had personal information, such as their names and MyKad numbers published.

“We anticipate and are preparing for the criminals to publish more information including additional customer names and MyKad numbers,” it said.

On March 30, AKPK said its server containing customer data may have been illegally accessed.

It said the dissemination of the data was a criminal offence.

AKPK said it was working closely with law enforcement agencies and other relevant authorities, including the communications and digital ministry, and CyberSecurity Malaysia in the ongoing investigation.

“We are also working to identify the specific information that has been illegally accessed and update the customers who have been affected,” it said.

AKPK said that some operational systems would be taken offline temporarily to prevent further breaches.

“We are gradually bringing our systems back online in stages and will provide an official update accordingly. In the meantime, we have relevant arrangements in place to maintain our services to our customers with as little disruption as possible.”

We are live on Telegram, subscribe here for breaking news and the latest announcements.