redONE Network Sdn Bhd

Profile narrative

redONE, also known as redONE Network Sdn Bhd, is a telecommunications provider headquartered in Malaysia. The organisation offers core telecommunication services to consumers and businesses across the country. In addition to connectivity, redONE provides affiliated financial and insurance services to its subscriber base. According to the reported incident, the company serves over 1.2 million subscribers. This subscriber base places redONE among the larger mobile operators in the Malaysian market. The combination of telecom, financial and insurance offerings distinguishes redONE from pure‑play carriers. Its integrated service model positions it as a converged digital services provider in Southeast Asia. The organisation’s market focus is primarily Malaysia, where it operates its network and partner programmes.

On 19 September 2022, redONE experienced a cyberattack carried out by the threat group known as DESORDEN. The attackers infiltrated the company’s systems, compromising both customer databases and internal source code. Sensitive personal information exfiltrated included national identification numbers, residential addresses, and contact details. Following the initial breach, DESORDEN launched a secondary attack targeting redONE’s partnered financial and insurance programmes. Independent verification of the leaked records was performed using redONE’s own account validation system, confirming the authenticity of the data. After obtaining the data, DESORDEN issued an ultimatum demanding contact within a specified timeframe under threat of public sale of the stolen information. At the time of the public report, approximately half of the ultimatum’s deadline had already elapsed. The incident highlighted vulnerabilities in the telecom’s data protection measures and the ripple effects on its financial‑insurance partners. The available sources do not disclose any explicit details regarding redONE’s ownership structure or parent/subsidiary relationships. Consequently, any description of the company’s corporate governance must be limited to the information presented in the breach report.

Incidents

1 incident linked to this organisation.