{"id":1910,"date":"2019-10-07T02:23:02","date_gmt":"2019-10-07T02:23:02","guid":{"rendered":"http:\/\/foongchengleong.com\/?p=1910"},"modified":"2019-11-19T12:54:59","modified_gmt":"2019-11-19T12:54:59","slug":"malindo-airs-data-breach","status":"publish","type":"post","link":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/","title":{"rendered":"Malindo Air’s Data Breach"},"content":{"rendered":"\n

I was asked to comment on Malindo Air’s latest data breach incident by South China Morning Post, Malaysian Reserves and Global Data Review.

Malindo Air, a subsidiary of low-cost airline Lion Air, has suffered a massive data breach, resulting in the information of millions of passengers \u2013 including passport details, home addresses and phone numbers \u2013 being leaked onto data exchange forums last month. <\/p>\n\n\n\n

In South China Morning Post’s article title ” Malindo Air confirms data breach, exposing millions of passengers\u2019 personal data<\/a>“, it was reported-<\/p>\n\n\n\n

Cyber law and technology lawyer Foong Cheng Leong said that companies in breach of Malaysia\u2019s Personal Data Protection Act are not under any legal obligation to notify the authorities, the public, or the victim of the leak, although this lacuna is being reviewed.<\/p>

There is no data breach notification rule in Malaysia under this Act. However, there is of course a moral obligation on the part of the company to notify the subject and the public,\u201d said Foong.<\/p>

Unfortunately in Malaysia these data breaches happen often, but if nobody knows about it nothing happens. During past breaches, there were some investigations but no prosecutions and no repercussions.<\/p><\/blockquote>\n\n\n\n


In the Malaysian Reserve’s article titled “Experts call for tougher law on data breach as Malindo Air becomes latest victim<\/a>“, I said-
<\/p>\n\n\n\n

\u201cThere should be a data breach notification law. Data subjects have the right to know that their information has been compromised and take steps to secure the data,\u201d Bar Council\u2019s information technology and cyber laws committee deputy chairman Foong Cheng Leong told The Malaysian Reserve in an earlier report.<\/p>

He added that the Personal Data Protection Commissioner had introduced a consultative paper to propose the mandatory disclosure, but the progress has been muted so far.<\/p>

Currently, parties suffering from a data leak in Malaysia are not obliged to notify the authorities or the victims.<\/p>

\u201cIn Europe, under the general data protection regulation, any companies including foreign firms with an office and\/or serve the European region are required to lodge a report of any data breach within 72 hours.<\/p>

\u201cOrganisations face the risk of a fine up to 4% of global revenue in the event of a data breach,\u201d Foong said. <\/p><\/blockquote>\n\n\n\n

Lastly, in Global Data Review’s article titled “Lion Air Group data breach affects more than 30 million customers<\/a>“, it was reported- <\/p>\n\n\n\n

Foong Cheng Leong, a partner at Foong Cheng Leong & Co in Kuala Lumpur, said Malindo Air may have fallen foul of the country\u2019s Personal Data Protection Act. This can attract criminal sanctions: a fine up to 300,000 ringgit (\u20ac65,000) and prison sentences of up to two years.

In spite of this, Leong said enforcement may not be forthcoming. He said that the government has yet to make a prosecution under the law for a data breach in spite of \u201cnumerous high-profile data breaches\u201d in Malaysia since the law came into force.

….

Leong said Malindo Air might be liable under other data protection laws in the region. \u201cHowever, it is not known if the data protection authorities will take or have the power to take any action against Malindo Air\u201d, he said.

…

Leong said that the issue has drawn attention to the absence of notification requirements in Malaysia\u2019s data protection law. <\/p><\/blockquote>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

I was asked to comment on Malindo Air’s latest data breach incident by South China Morning Post, Malaysian Reserves and Global Data Review. Malindo Air, a subsidiary of low-cost airline Lion Air, has suffered a massive data breach, resulting in the information of millions of passengers \u2013 including passport details, home addresses and phone numbers […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[1077,1276,1272,1274,1273,17,1275],"class_list":["post-1910","post","type-post","status-publish","format-standard","hentry","category-social-media","tag-data-breach-notification","tag-global-data-review","tag-malaysia-data-breach","tag-malaysian-reserve","tag-malindo-air","tag-personal-data-protection-act-2010","tag-south-china-morning-post"],"yoast_head":"\nMalindo Air's Data Breach - Foong Cheng Leong<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Malindo Air's Data Breach - Foong Cheng Leong\" \/>\n<meta property=\"og:description\" content=\"I was asked to comment on Malindo Air’s latest data breach incident by South China Morning Post, Malaysian Reserves and Global Data Review. Malindo Air, a subsidiary of low-cost airline Lion Air, has suffered a massive data breach, resulting in the information of millions of passengers \u2013 including passport details, home addresses and phone numbers […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"Foong Cheng Leong\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/FCLCo\" \/>\n<meta property=\"article:published_time\" content=\"2019-10-07T02:23:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-11-19T12:54:59+00:00\" \/>\n<meta name=\"author\" content=\"FCL\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"FCL\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/malindo-airs-data-breach\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/malindo-airs-data-breach\\\/\"},\"author\":{\"name\":\"FCL\",\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/#\\\/schema\\\/person\\\/c3c6afdacad8d7eb10ab36074bb52c70\"},\"headline\":\"Malindo Air’s Data Breach\",\"datePublished\":\"2019-10-07T02:23:02+00:00\",\"dateModified\":\"2019-11-19T12:54:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/malindo-airs-data-breach\\\/\"},\"wordCount\":543,\"commentCount\":0,\"keywords\":[\"data breach notification\",\"Global Data Review\",\"Malaysia data breach\",\"Malaysian Reserve\",\"Malindo Air\",\"Personal Data Protection Act 2010\",\"South China Morning Post\"],\"articleSection\":[\"Social Media\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/malindo-airs-data-breach\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/malindo-airs-data-breach\\\/\",\"url\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/malindo-airs-data-breach\\\/\",\"name\":\"Malindo Air's Data Breach - Foong Cheng Leong\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/#website\"},\"datePublished\":\"2019-10-07T02:23:02+00:00\",\"dateModified\":\"2019-11-19T12:54:59+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/#\\\/schema\\\/person\\\/c3c6afdacad8d7eb10ab36074bb52c70\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/malindo-airs-data-breach\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/malindo-airs-data-breach\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/malindo-airs-data-breach\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Malindo Air’s Data Breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/#website\",\"url\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/\",\"name\":\"Foong Cheng Leong\",\"description\":\"Intellectual Property, Information Technology, Privacy and Data Protection and Franchise\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/#\\\/schema\\\/person\\\/c3c6afdacad8d7eb10ab36074bb52c70\",\"name\":\"FCL\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/438af75bba3b98182ef9513e4efeaffd8bf31b2749815d3947be33cc75770ec0?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/438af75bba3b98182ef9513e4efeaffd8bf31b2749815d3947be33cc75770ec0?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/438af75bba3b98182ef9513e4efeaffd8bf31b2749815d3947be33cc75770ec0?s=96&d=mm&r=g\",\"caption\":\"FCL\"},\"sameAs\":[\"https:\\\/\\\/foongchengleong.com\\\/wp\"],\"url\":\"https:\\\/\\\/foongchengleong.com\\\/wp\\\/author\\\/xes\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Malindo Air's Data Breach - Foong Cheng Leong","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/","og_locale":"en_US","og_type":"article","og_title":"Malindo Air's Data Breach - Foong Cheng Leong","og_description":"I was asked to comment on Malindo Air’s latest data breach incident by South China Morning Post, Malaysian Reserves and Global Data Review. Malindo Air, a subsidiary of low-cost airline Lion Air, has suffered a massive data breach, resulting in the information of millions of passengers \u2013 including passport details, home addresses and phone numbers […]","og_url":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/","og_site_name":"Foong Cheng Leong","article_publisher":"https:\/\/www.facebook.com\/FCLCo","article_published_time":"2019-10-07T02:23:02+00:00","article_modified_time":"2019-11-19T12:54:59+00:00","author":"FCL","twitter_card":"summary_large_image","twitter_misc":{"Written by":"FCL","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/#article","isPartOf":{"@id":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/"},"author":{"name":"FCL","@id":"https:\/\/foongchengleong.com\/wp\/#\/schema\/person\/c3c6afdacad8d7eb10ab36074bb52c70"},"headline":"Malindo Air’s Data Breach","datePublished":"2019-10-07T02:23:02+00:00","dateModified":"2019-11-19T12:54:59+00:00","mainEntityOfPage":{"@id":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/"},"wordCount":543,"commentCount":0,"keywords":["data breach notification","Global Data Review","Malaysia data breach","Malaysian Reserve","Malindo Air","Personal Data Protection Act 2010","South China Morning Post"],"articleSection":["Social Media"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/","url":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/","name":"Malindo Air's Data Breach - Foong Cheng Leong","isPartOf":{"@id":"https:\/\/foongchengleong.com\/wp\/#website"},"datePublished":"2019-10-07T02:23:02+00:00","dateModified":"2019-11-19T12:54:59+00:00","author":{"@id":"https:\/\/foongchengleong.com\/wp\/#\/schema\/person\/c3c6afdacad8d7eb10ab36074bb52c70"},"breadcrumb":{"@id":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/foongchengleong.com\/wp\/malindo-airs-data-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/foongchengleong.com\/wp\/"},{"@type":"ListItem","position":2,"name":"Malindo Air’s Data Breach"}]},{"@type":"WebSite","@id":"https:\/\/foongchengleong.com\/wp\/#website","url":"https:\/\/foongchengleong.com\/wp\/","name":"Foong Cheng Leong","description":"Intellectual Property, Information Technology, Privacy and Data Protection and Franchise","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/foongchengleong.com\/wp\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/foongchengleong.com\/wp\/#\/schema\/person\/c3c6afdacad8d7eb10ab36074bb52c70","name":"FCL","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/438af75bba3b98182ef9513e4efeaffd8bf31b2749815d3947be33cc75770ec0?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/438af75bba3b98182ef9513e4efeaffd8bf31b2749815d3947be33cc75770ec0?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/438af75bba3b98182ef9513e4efeaffd8bf31b2749815d3947be33cc75770ec0?s=96&d=mm&r=g","caption":"FCL"},"sameAs":["https:\/\/foongchengleong.com\/wp"],"url":"https:\/\/foongchengleong.com\/wp\/author\/xes\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/posts\/1910","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/comments?post=1910"}],"version-history":[{"count":2,"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/posts\/1910\/revisions"}],"predecessor-version":[{"id":1916,"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/posts\/1910\/revisions\/1916"}],"wp:attachment":[{"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/media?parent=1910"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/categories?post=1910"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/foongchengleong.com\/wp\/wp-json\/wp\/v2\/tags?post=1910"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}