Influencer and entrepreneur Khairul Aming’s personal mobile phone billing details were allegedly leaked online on July 19, 2026, exposing his outstanding balance, payment history, subscriptions, and IC number on social media platforms [1, 2, 3]. The breach reportedly involved unauthorized access to Maxis Bhd’s internal system or customer account [1, 2].

Maxis publicly identified the individual responsible, apologized to Khairul Aming, and said it is taking immediate legal action against the person involved [1, 4]. The company stated the incident was isolated and found no evidence of a wider compromise affecting other customers [1, 4].

Khairul Aming has lodged official complaints with the Malaysian Communications and Multimedia Commission (MCMC), the police, and the Personal Data Protection Commissioner Office. He has also initiated legal proceedings by issuing a letter of demand to Maxis to resolve the matter [5, 6]. He expressed feeling “sad and scared” over the privacy breach and questioned how Maxis allowed access to his data through the MySara self-service platform [5, 6].

Communications Minister Datuk Seri Fahmi Fadzil directed MCMC to obtain a full report on the incident and called on anyone experiencing similar breaches to lodge reports. He said, “This is quite a worrying matter because the complaint I read from Khairul Aming gives an impression of an individual who shouldn’t have access to personal information, nor access to the inventory or system owned by a telco company.” He also met with Maxis representatives, who confirmed they are contacting Khairul Aming [1, 2].

The Personal Data Protection Department is investigating the case under the Personal Data Protection Act 2010, specifically Section 130 on unlawful collection or disclosure of personal data. Under the Act, penalties include fines and/or imprisonment, though reports differ on the maximum fine: one source states RM50,000 while another cites RM500,000, both with up to three years’ imprisonment [1, 5, 7].

The leaked phone bill reportedly showed an outstanding balance of RM498 [2, 3].

The sequence of events began on July 19 with the leak surfacing on social media [1, 2]. Khairul Aming publicly questioned the leak on July 20 and demanded an explanation from Maxis [1, 5]. Communications Minister Fahmi Fadzil instructed MCMC to investigate and met Maxis on July 21, when Maxis issued a public statement identifying the culprit, apologizing, and confirming legal action [1, 2, 4]. On July 22, Khairul Aming shared that his lawyers sent a Letter of Demand to Maxis and that official complaints had been lodged. The Personal Data Protection Department announced an ongoing investigation that day [5, 7].

Maxis is pursuing the case through legal channels as investigations continue, aiming to resolve the matter promptly.