# MA-818.102021: MyCERT Alert - Security Best Practices on Data Breach Incident

**Date:** 04 Oct 2021  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-818.102021  
**Advisory ID:** MA-818.102021

---

MyCERT observes an increasing incident 
Hence, MyCERT would like to advise individuals to be more alert and vigilant as well as system owners to adhere to the latest security updates and follow best practice security policies to determine which updates should be applied.
**Impact**
The impact of a data breach depends on the nature and extent of the breach and the type of information that has been compromised. Some breaches may involve only one or two people while others may affect hundreds or thousands. Larger breaches expose a wider group of people and could require considerable notification and remediation activities.
Serious impacts of a data breach could include:
- Risk to individuals’ safety
- Increase fraudulent activities such as scams and impersonation
- Financial loss to an individual or organization
- Damage to personal reputation or position
- Loss of public trust in an Agency or the services it provides
- Commercial risk through disclosure of commercially sensitive information to third parties
- Threat to an Agency’s systems, impacting the capacity to provide services
- Impact on Government reputation, finances, interests, or operation.
- Loss of data integrity.
**Recommendation**
Protection of sensitive data is required not only for legal or ethical reasons but for issues 
MyCERT has prepared guidelines from the previous advisory: [MA-746.092019: MyCERT Advisory - Security Best Practices on Data Breach Incident.](https://www.mycert.org.my/portal/advisory?id=MA-746.092019) There are two sections in the guidelines which are steps to prepare before the incident occurs and suggested response action to be taken after the incident had taken place.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 -18:00 MYT
Web: <https://www.mycert.org.my>
Twitter: <https://twitter.com/mycert>
Facebook: <https://www.facebook.com/mycert.org.my>