Data Breach Incident
EnQuest Petroleum Developments Malaysia Sdn Bhd ("EnQuest Malaysia") experienced a data breach incident involving a system used for file transfers with external parties. We are committed to being open and transparent about what happened and what we have done in response.
This notice is intended to provide general information regarding the incident, what EnQuest has done in response and how individuals can request further information.
What Happened and Who May Be Affected?
EnQuest Malaysia experienced a data breach incident circa end Q4 2025 involving a system used for file transfers with external parties. Unauthorised access was obtained to certain files stored on this system which contained personal data. We have notified the Malaysian Personal Data Protection Commissioner’s Office in accordance with our regulatory obligations as well as a number of individuals we have verified as being affected by the incident.
Our investigation has determined that some files containing personal data were taken and later published on the dark web - a part of the internet not accessible through standard web browsers.
The personal data involved may relate to the following groups of individuals:
- Current and former staff/contractors of EnQuest Malaysia;
- Representatives and staff of clients or suppliers who have interacted with EnQuest Malaysia.
The specific types of personal data affected will vary depending on the respective relationships with EnQuest Malaysia.
While we have not identified any evidence that the affected personal data has been misused, we recommend that all potentially affected individuals remain vigilant and watch out for:
- phishing emails or unexpected requests for your personal information; and
- any signs of identity theft or other fraudulent activity.
If you believe your personal data may have been affected, or if you have any questions, please contact us at EnQuest’s dedicated email address: dataenquiries@enquest.com for support.
We will continue to monitor our systems and implement further security measures as appropriate. We take the protection of personal data seriously and sincerely apologise for any concern or inconvenience this incident may cause.