We refer to the following news articles entitled:

1. “AirAsia hit by ransomware attack, five million passenger and employee data compromised” featured in The Edge Markets on 23 November 2022; and
2. “AirAsia allegedly hit with ransomware attack, data of five million passengers and employees reportedly compromised” featured in The Star on 23 November 2022.

The Company wishes to clarify that the cyber attack was on redundant systems and did not affect our critical systems. The Company had taken all measures to immediately resolve this data incident and prevent such future incidents. 

There had been no operational or financial impact to the Company arising from this.

This announcement is dated 24 November 2022.