Popular local entrepreneur and content creator Khairul Aming has publicly called out a Threads user for sharing his private telecommunications billing information online. The incident has sparked heated debate regarding customer data handling, potential insider leaks, and the enforcement of personal privacy laws in Malaysia.
What actually happened?
A now-deleted post on Threads has disclosed key details from Khairul Aming’s personal Maxis account. The poster alleged that the celebrity chef had an overdue balance of RM498.
The user went further by questioning how a balance could be overdue given that Khairul Aming had previously paid an advance of RM2,000 intended to cover a full year. The post even speculated on his digital add-on purchases, claiming they reached up to RM400, to argue that the advance credit should not have lapsed so quickly.
Khairul Aming swiftly responded on the same platform, criticising the unauthorised exposure of his personal billing records. He clarified that while he often pays his bills in advance for convenience, he was unaware that his advance balance had already been exhausted.
Post on Threads
Major PDPA and data privacy concerns raised
The incident has triggered widespread scrutiny over data security practices in Malaysia. Netizens were quick to point out that disclosing individual account statements and financial statuses without consent is a clear violation of the Personal Data Protection Act 2010 (PDPA).
Under the PDPA 2010, data users, including commercial entities and their handling staff, are legally required to safeguard personal data against unauthorised access, disclosure, or misuse.
Commenters voiced deep concern over how easily customer details could be leaked online. Several users also questioned the strength of PDPA protections regarding internal data handlers, highlighting potential vulnerabilities when personal information passes through service personnel.
Maxis responds: isolated incident, legal action underway
Maxis has since issued an official statement on Facebook, confirming that an investigation was launched into this incident. It clarified that the leak was an isolated event involving unauthorised action, with no evidence of a broader breach impacting other customers.
Maxis added that it has identified the individual linked to the leak, is taking immediate legal action, and has reached out directly to Khairul Aming.
Minister calls for full MCMC report into leak
Communications Minister Fahmi Fadzil has instructed the Malaysian Communications and Multimedia Commission (MCMC) to submit a comprehensive report regarding the circumstances surrounding Khairul Aming’s personal data breach.
The regulatory spotlight is now firmly on Maxis, with Fahmi noting that the incident strongly implies unauthorised parties were able to access and view confidential customer information directly from the telco’s internal systems.
Fahmi confirmed he has raised the issue directly with senior representatives at Maxis, who are currently liaising with the entrepreneur regarding the matter.
