Bank Negara restores Experian's access to CCRIS

On Sept 30, Bank Negara issued a temporary suspension of CCRIS access to all Credit Reporting Agencies (CRAs) including Experian as a proactive and precautionary measure due to a credible cyber threat.

KUALA LUMPUR: Bank Negara Malaysia is restoring Experian Information Services (Malaysia) Sdn Bhd's access to the Central Credit Reference Information System (CCRIS) on effective Monday after a temporary suspension on Sept 30, the company said.

In a statement on Monday, Experian said the central bank accepted the findings of the security assessment provided by Experian.

Experian’s services and reports containing CCRIS data will then be available as normal to all businesses and consumers.

On Sept 30, Bank Negara issued a temporary suspension of CCRIS access to all Credit Reporting Agencies (CRAs) including Experian as a proactive and precautionary measure due to a credible cyber threat.

In line with Bank Negara's directive, Experian said it conducted an extensive internal security investigation and engaged an independent global expert in cyber security to conduct a security compromise assessment.

All investigations have found no evidence of any compromise in Experian’s systems, servers or facilities.

Experian has also actively supported Bank Negara in their investigation by providing all relevant compromise assessment documentation as requested by the central bank on Oct 14. Consequently, Bank Negara lifted the suspension of Experian’s access to CCRIS.

Experian is a global industry leader in data security, operating 24 consumer credit bureaus globally, and invests heavily in cyber security with specialist teams, state-of-the-art technology and rigorous due diligence procedures to deal with potential threats.

Experian Information Services (Malaysia) CEO, Dawn Lai said the group's global security operations centre works around the clock to identify suspicious or malicious activity, with teams on the ground in Malaysia, the UK and the US, as well as automated tools and AI.

“As cyberthreats mount and the complexity of such threats advance, Experian understands how critically important it is for us to maintain global, best-in-class information security systems and protocols in place to protect the data integrity of businesses and consumers today and for the future.

"We frequently conduct regular checks and audits to ensure that we protect our IT infrastructure, edge devices, networks, and data.

"Above and beyond this is our people investment which consists of global leading information and cybersecurity security professionals and consultants, who put our systems through rigorous and robust stress tests and reporting.

"Another additional area where we demonstrate our commitment to Malaysia is through our attainment as the country’s only CRA to be awarded the global ISO27001:2013 information security certification since 2017.

“As the first CRA in Malaysia to have its CCRIS access reinstated, Experian is currently working actively with clients and consumers to provide the support they may need to re-establish any information gaps they may have experienced over the course of this temporary disruption.

"Our goal is to enable them to return to business as usual expeditiously, with the highest level of service and commitment they have always received,” Lai said.

Experian continues to make its JagaMyID identity monitoring service available for free for three months to all Malaysians as a precautionary measure to help Malaysian consumers safeguard their identities on the dark web.

Consumers are encouraged to register for their free three-month subscription to Experian JagaMyID at https://www.mycreditinfo.com.my/ before Oct 31, 2021.