CTOS cyber breach could shave RM22 million from FY26 core profit
A cybersecurity incident at CTOS Digital Bhd may cut its FY26 core net profit by RM22 million if key credit-scoring services stay down through December.
CTOS Digital Bhd disclosed that an unauthorized party accessed its CCRIS consumer self-check environment, exposing a limited set of processed consumer data. The outage has kept CTOS Score and CCRIS-related services offline, potentially reducing FY26 core net profit by RM22 million if remediation is not completed by the end of December. Kenanga Research updated its outlook, trimming FY26 profit by 22.6% and FY27 profit by 3.5%, and cut the target price from 83 to 48 sen, citing heightened operational, regulatory and reputational risks.
About 35% of the group's weekly revenue, covering financial-institution and corporate services, is impacted, while international revenue is untouched. Two of four one outlet's reviews are finished, with vulnerability assessments and penetration testing slated for completion this month before services resume. The research house warns that a prolonged outage could drive customer attrition and increase regulatory scrutiny.
Why it matters
The breach threatens CTOS's earnings and could disrupt credit-scoring services used by Malaysian lenders.
In this story
