Popular local entrepreneur and content creator Khairul Aming has publicly called out a Threads user for sharing his private telecommunications billing information online. The incident has sparked heated debate regarding customer data handling, potential insider leaks, and the enforcement of personal privacy laws in Malaysia.
What actually happened?
A now-deleted post on Threads disclosed key details from Khairul Aming’s personal Maxis account, with the poster alleging that the celebrity chef had an overdue balance of RM498 and warning that his line could soon be barred.
The user went on to speculate about his account management, suggesting that even if Khairul Aming had paid RM2,000 in advance to cover a year’s worth of bills, it would still fall short if digital add-ons were costing over RM400.
Khairul Aming swiftly responded on the same platform, criticising the unauthorised exposure of his personal billing records. He clarified that while he routinely pays large lump sums in advance for convenience, he was simply unaware that his advance credit had already been exhausted.
Post on Threads
Major PDPA and data privacy concerns raised
The incident has triggered widespread scrutiny over data security practices in Malaysia. Netizens were quick to point out that disclosing individual account statements and financial statuses without consent is a clear violation of the Personal Data Protection Act 2010 (PDPA).
Under the PDPA 2010, data users, including commercial entities and their handling staff, are legally required to safeguard personal data against unauthorised access, disclosure, or misuse.
Commenters voiced deep concern over how easily customer details could be leaked online. Several users also questioned the strength of PDPA protections regarding internal data handlers, highlighting potential vulnerabilities when personal information passes through service personnel.
Maxis responds: isolated incident, legal action underway
Maxis has since issued an official statement on Facebook, confirming that an investigation was launched into this incident. It clarified that the leak was an isolated event involving unauthorised action, with no evidence of a broader breach impacting other customers.
Maxis added that it has identified the individual linked to the leak, is taking immediate legal action, and has reached out directly to Khairul Aming.
Minister calls for full MCMC report into leak
Communications Minister Fahmi Fadzil has instructed the Malaysian Communications and Multimedia Commission (MCMC) to submit a comprehensive report regarding the circumstances surrounding Khairul Aming’s personal data breach.
The regulatory spotlight is now firmly on Maxis, with Fahmi noting that the incident strongly implies unauthorised parties were able to access and view confidential customer information directly from the telco’s internal systems.
Fahmi confirmed he has raised the issue directly with senior representatives at Maxis, who are currently liaising with the entrepreneur regarding the matter.
