CIMB has just revealed that it has lost several magnetic tapes containing back-up data. According to the bank, the tapes were lost in transit during routine operations. Some of these tapes contained customer information of CIMB Bank and its subsidiaries.
Despite the loss, the bank has assessed that there is currently no evidence that any of this information has been compromised. The tape data does not contain any authentication data such as PINs, passwords or credit card CVV numbers.
This unfortunately does not reveal how much personal information, if any, were stored on the tapes or if there is a possibility that the information will be leaked at a further date.
In response to this incident, the bank has claimed to increasing security measures across all channels, including temporarily suspending some services via its call centre e.g., change of address, telephone number and/or email address for banking/credit cards; third party fund transfer or payment for customers without T-Pin; and T-Pin creation or requests.
Whilst no action is required on the part of customers, CIMB is recommending that customers be extra vigilant and when in doubt, refer only to official CIMB channels such as its website, call centre and branches.
“We take our responsibility to our customers very seriously and we are confident the measures we have put in place will maintain the safety of customer transactions. Although this was an isolated incident, we have reviewed and further strengthened our security and internal processes to ensure that we remove the possibility of it recurring,” said Tengku Dato’ Sri Zafrul Aziz, Group Chief Executive, CIMB Group.
“We apologise for the inconvenience that our heightened security measures may cause to our customers in the interim. Know that we are working very closely with all relevant authorities to mitigate any risk arising from this incident,” continued Zafrul.