The Board of Directors of CTOS Digital Berhad ("CTOS") wishes to announce that the Company's cybersecurity system recently detected an unauthorised access to a specific environment supporting its consumer business. Upon detection, the Company immediately activated the necessary protocols and successfully contained the affected environment.  

The Company has also engaged an independent incident response team to conduct a comprehensive forensic investigation. Based on the investigation's assessment ("Assessment") received to date, the incident has been contained within the identified environment. The Company's systems remain fully secure and functional, and no other environments were impacted. 

The Assessment also indicates that certain data files containing a limited subset of processed consumer information were accessed from the impacted environment. The Company is continuously reviewing its cybersecurity protocols and is strengthening its cybersecurity posture in accordance with the independent forensic report. 

A subset of the Company's credit reporting services is temporarily unavailable as we complete the necessary remediations. The Company's other business operations and services continue to operate and function normally. Based, on available facts there is no material financial impact to the Company. 

The Company remains committed to maintaining the highest standards of compliance, corporate governance and management of our cybersecurity infrastructure. 

The Company has notified the relevant authorities and will continue to monitor and shall make further announcement(s) should there be any material developments in relation to the disclosure. 

The Board wishes to assure shareholders, customers, business partners and other stakeholders that the Company remains committed to conducting its business in a responsible, transparent and compliant manner.