Bank Negara Malaysia (BNM) has restored Experian Information Services (Malaysia) Sdn Bhd (Experian)’s access to the Central Credit Reference Information System (CCRIS) with effect from 25 Oct 2021. As such, all Experian’s services and reports containing CCRIS data are made available as normal to all businesses and consumers.
Experian said in a statement that BNM has accepted the findings of the security assessment it provided.
On 30 September 2021, BNM issued a temporary suspension of CCRIS access to all Credit Reporting Agencies (CRAs) including Experian as a proactive and precautionary measure due to a credible cyber threat.
In line with this directive, Experian conducted an extensive internal security investigation and engaged an independent global expert in cyber security to conduct a security compromise assessment.
“All investigations have found no evidence of any compromise in Experian’s systems, servers or facilities. Experian has also actively supported BNM in their investigation by providing all relevant compromise assessment documentation as requested by the central bank on 14 October 2021,” the company said.
Consequently, BNM has lifted the suspension of Experian’s access to CCRIS.
Experian continues to make its JagaMyID identity monitoring service available for free for 3 months to all Malaysians as a precautionary measure to help Malaysian consumers safeguard their identities on the dark web.
Consumers are encouraged to register for the subscription at https://www.mycreditinfo.com.my/ before 31 October 2021.
“We frequently conduct regular checks and audits to ensure that we protect our IT infrastructure, edge devices, networks, and data. Above and beyond this is our people investment which consists of global leading information and cybersecurity security professionals and consultants, who put our systems through rigorous and robust stress tests and reporting. Another area where we demonstrate our commitment to Malaysia is through our attainment as the country’s only CRA to be awarded the global ISO27001:2013 information security certification since 2017.”
Experian operates 24 consumer credit bureaux globally, and invests heavily in cyber security with specialist teams, state-of-the-art technology and rigorous due diligence procedures to deal with potential threats. Experian’s Global Security Operations Centre works around the clock to identify suspicious or malicious activity, with teams on the ground in Malaysia, the UK and the USA, as well as automated tools and AI.