Yesterday we reported that hackers claimed they had the data of 4 million U Mobile users successfully stolen. This data is then sold for $5000 through the BreachForum site. U Mobile released a statement saying they are investigating the validity of the data sold and working with the authorities.
Late last night, we received another official statement from U Mobile saying the data being sold was old data from 2014. It was part of the telco's massive data leak and reported to the authorities in 2017. Here is the official statement from U Mobile.
U Mobile acknowledged the recent data breach allegations. Our initial investigation shows that there are no leaks against our current system. From our initial assessment, the data in question is suspected to be from the 2014 Malaysian data leak, which was previously reported to the authorities in 2017.
We are continuing to work with the relevant authorities to address this matter and will provide an update once information is confirmed. We want to assure our customers that we are committed to data security, and will continue to improve the security of our systems to protect their data.