Local online payment platform toyyibPay investigates alleged data breach

PETALING JAYA: Digital payments platform toyyibPay said it is currently investigating an alleged data breach after a hacker released a sample of a database for sale online, which allegedly contained files belonging to the company.

“We are currently conducting a detailed investigation into this matter to verify the allegations,” the company said when contacted by LifestyleTechnology.

She added that any further information will be shared once investigations are completed.

“ToyyibPay will immediately report the matter to the authorities if the allegations are found to be true,” the company said.

A hacker on an online data leak forum offered a purported toyyibPay database for sale, asking for 0.7 bitcoin (about RM184,000) as payment, in a post on Aug 22, with priority given to the owner of toyyibPay for “exclusivity”.

The hacker claimed that the database, which was over 12GB in size, contained personally identifiable information such as names, emails and phone numbers.

Launched in 2019, toyyibPay claimed on its website that more than 40,000 merchants were using the company’s services.