Date of Publication: 20 November 2024
At CHAGEE Malaysia, the security and privacy of our data subjects’ personal data are of our highest priorities. It is with deep concern that we inform you of a data breach incident that occurred on 20 November 2024, involving unauthorised access to our servers by malicious threat actors.
Upon discovering the data breach incident, we have taken swift and decisive actions to mitigate risks, respond effectively, and ensure a robust recovery of the affected personal data. We have engaged a law firm, Halim Hong & Quek, to notify the relevant regulators and law enforcement agencies and are working closely with our legal counsel to ensure comprehensive remediation. The following actions are currently underway:
- Notifying the Personal Data Protection Commissioner of the Department of Personal Data Protection regarding the personal data breach;
- Lodging a complaint with the Malaysian Communications and Multimedia Commission to facilitate the removal of any malicious or fraudulent content related to this breach and to block access to affected links that may pose further risks;
- Filing a report with the Royal Malaysia Police to initiate an investigation and take appropriate actions against those responsible; and
- Notifying the data subjects whose data may have been impacted by this breach to provide guidance and support in safeguarding their personal information.
To further strengthen our response, we will also conduct a comprehensive audit of our IT systems and infrastructure. This process aims to identify the source of the breach, evaluate vulnerabilities, and implement enhanced security measures to prevent future incidents.
We take this incident with the utmost seriousness and are committed to taking all necessary steps to address it effectively. Our data security framework is being closely monitored, and additional preventive measures are being implemented to strengthen our systems.
We will also take all necessary legal actions to protect the interests of the organization, our stakeholders, data subjects, and everyone involved. We reserve the right to pursue legal remedies against those responsible for this breach, including civil and criminal actions, to the fullest extent of the law. We are committed to ensuring that such unlawful actions are not tolerated and that those responsible are held accountable for their actions.
We understand the concern this incident may cause, and we urge everyone to remain vigilant and report any suspicious activity directly to us. We want to ensure you that CHAGEE Malaysia remains unwavering in our commitment to upholding the highest standards of data protection and security, and we will continue to provide transparent updates as we move forward in resolving this matter.
If you have any questions or require assistance, please do not hesitate to contact us at customercare@chagee.com.my.
Thank you for your understanding and continued trust in CHAGEE Malaysia.
Sincerely,
CHAGEE Malaysia
