U Mobile: Breach Not New; Data Likely From 2014 - Lowyat.NET

Hackers recently posted for sale what is claimed to be a dataset containing personally identifiable information of about four million U Mobile customers. The telco had issued a statement saying that it was actively investigating the incident, and more recently, has found that the data breach was not a new one. In a new statement, U Mobile says that it "acknowledges the recent allegations of a data breach", but claims that its "preliminary investigations indicate that there was no breach to our current systems". Instead, the telco claims that "the data in question is suspected to be from the 2014 Malaysian data breach, which was previously reported to the authorities in 2017''. For context, at the time, said breach leaked about 46.2 million phone numbers from Malaysian telcos and mobile virtual network operators (MVNO). Also leaked at the time were databases from the Malaysian Medican C...