Initial investigations into the data leak involving five million AirAsia passengers and staff found there was a cyberattack on AirAsia's server system on Nov 12 resulting from unauthorised access.

Communications and Digital Minister Fahmi Fadzil said the cyberattack had the potential to cause data leakage and further investigations were underway to identify the cause of the intrusion as well as the overall impact of the incident.