Kuala lumpur: The Personal Data Protection Department (JPDP) is investigating the unauthorised disclosure of account and phone bill details belonging to a Maxis customer on social media recently.

According to BERNAMA News Agency, the department stated that action would be taken if investigations found any non-compliance with the Personal Data Protection Principles or Section 130 of the Personal Data Protection Act 2010. It emphasized the responsibility of every data controller to adhere to the seven Personal Data Protection Principles, which include the protection of customers' personal data against unauthorised access and disclosure.

The statement also highlighted the need for data controllers to continuously enhance technical and organizational security measures and to maintain data storage infrastructure and network systems at an appropriate level of security. Earlier, a Threads user claimed to know the phone bill details of entrepreneur and social media influencer Khairul Amin Kamarulzaman, better known as Khairul Aming.

In response, Maxis confirmed yesterday that the incident involved unauthorised access and that the individual responsible had been identified, with legal action being taken. Meanwhile, Communications Minister Datuk Seri Fahmi Fadzil announced that the Malaysian Communications and Multimedia Commission (MCMC) would obtain a full report on the alleged leak of Khairul Aming's personal information.

He stressed that no individual should have access to another person's personal information or to telecommunications companies' inventory and systems. "This includes anyone who intentionally distributes Personally Identifiable Information (PII), as it is an offence under the Personal Data Protection Act," he said.