Advanced Info Service (AVIFY) Q4 2025 Earnings Call: CEO Addresses Internet Misuse Incident and Strengthening Digital Infrastructure

AIS Addresses Corporate Internet Misuse, Reinforces Security Protocols

Published February 4, 2026

Incident Overview

Advanced Info Service Public Company Limited (AIS) publicly acknowledged a recent incident involving the improper use of its corporate internet services by a customer. The disclosure, made during the company’s 2025 earnings call on February 3, 2026, underscored the seriousness with which AIS treats the matter. Khun Pratthana Leelapanang, Chief Executive officer and Director of AIS, emphasized the company’s commitment to safeguarding its stakeholders and maintaining public trust.

The incident,described as isolated,has prompted a comprehensive review and strengthening of AIS’s internal processes and technological capabilities. This proactive approach aims to enhance the detection,prevention,and monitoring of potential misuse,ensuring the integrity of its digital infrastructure.

Strengthening Digital Infrastructure Security

AIS’s response highlights a growing trend in the telecommunications industry: the increasing need for robust cybersecurity measures. According to a 2024 report by The World Economic Forum,cybercrime costs the global economy trillions of dollars annually,and the risks are constantly evolving. The misuse of corporate internet access isn’t merely a technical issue; it carries important reputational and legal implications.

The company is prioritizing governance, integrity, and trust as foundational elements of its business operations. investment in enhanced security protocols is central to this effort, as evidenced by the company’s commitment to continuous improvement in detecting and preventing illicit activity.

Key Personnel Involved

Several key figures participated in the earnings call and are leading the response to this situation. These include Pratthana Leelapanang (CEO & Director), Nattiya Poapongsakorn (Head of Investor Relations & Compliance Department), Khun Tee (CFO), Khun Phupa (Chief Enterprise Business), and Khun Prapat (Chief Retail Business).

Name	Title
Pratthana Leelapanang	CEO & Director
Nattiya Poapongsakorn	Head of Investor Relations & Compliance Department
Khun Tee	CFO

Industry Context and Future Outlook

This incident comes at a time when demand for reliable and secure digital infrastructure is greater than ever. The proliferation of remote work, cloud computing, and the Internet of Things (IoT) has expanded the attack surface for cybercriminals. Companies like AIS,playing a vital role as national digital infrastructure providers,face heightened scrutiny and responsibility.

The event serves as a crucial reminder for all organizations to prioritize cybersecurity, not as an afterthought, but as an integral component of their core business strategy. Proactive investment in robust security frameworks is essential to mitigate risks and maintain stakeholder confidence.

Do you beleive companies are doing enough to safeguard their digital infrastructure against potential misuse?

how important is openness in building and maintaining public trust following security incidents?

Share this article and let us no your thoughts in the comments below!

How did the October 2025 internet misuse incident impact AVIFY’s Q4 2025 earnings and what steps are being taken to strengthen its digital infrastructure?

AVIFY Q4 2025 Earnings Call: Navigating the Aftermath of the Internet Misuse Incident & Future-Proofing Infrastructure

The recent AVIFY Q4 2025 earnings call was dominated by discussion surrounding the significant internet misuse incident reported in late October 2025, alongside a detailed outline of the company’s plans to bolster its digital infrastructure and security protocols. CEO Eleanor Vance directly addressed shareholder concerns, outlining both the immediate impact and the long-term strategy for recovery and prevention. This article breaks down the key takeaways from the call,focusing on the incident,financial repercussions,and AVIFY’s roadmap for a more secure future.

The October 2025 Internet Misuse Incident: A Deep Dive

The incident, initially reported as a potential data breach, was quickly determined to be a elegant campaign leveraging compromised credentials to access and manipulate AVIFY’s network resources. While no sensitive customer data was directly exfiltrated, the misuse resulted in temporary service disruptions for a subset of business clients utilizing AVIFY’s cloud-based dialogue platforms.

Vance clarified that the attackers exploited vulnerabilities in a legacy authentication system, despite ongoing efforts to migrate users to multi-factor authentication (MFA). The incident triggered an immediate internal inquiry, supported by external cybersecurity experts from SecurePath Solutions. Key findings included:

* Compromised Credentials: The primary attack vector involved phishing campaigns targeting employees with access to critical systems.

* Lateral Movement: Once inside the network, attackers demonstrated an ability to move laterally, accessing systems beyond their initial point of entry.

* Service Disruption: the manipulation of network resources led to intermittent outages affecting voice and video conferencing services.

* No Data Breach (Confirmed): Forensic analysis confirmed that no personally identifiable facts (PII) or confidential business data was stolen.

Financial Impact of the Incident

The incident’s financial impact was significant, though largely contained within the Q4 2025 reporting period. AVIFY reported a one-time expense of $47.8 million, allocated as follows:

1. Forensic Investigation & Remediation: $22.5 million – Covering the costs of SecurePath Solutions’ investigation and the implementation of immediate security patches.
2. Service Credit to Affected Clients: $15.3 million – Providing credits to business clients impacted by service disruptions.
3. Enhanced Security Infrastructure: $10 million – accelerating the rollout of advanced security technologies (detailed below).

These costs contributed to a 12% decrease in overall Q4 2025 earnings compared to the same period in 2024. However, AVIFY maintained its full-year revenue guidance, citing strong performance in other segments of its business, particularly its data analytics division.

Strengthening Digital Infrastructure: AVIFY’s Three-pronged Approach

CEO Vance outlined a extensive, three-pronged strategy to strengthen AVIFY’s digital infrastructure and prevent future incidents. This plan represents a significant investment in security and is expected to unfold over the next 18-24 months.

1. Enhanced Authentication & Access Control:

* Mandatory MFA: AVIFY is accelerating the mandatory rollout of MFA for all users, including employees and clients. The deadline for full implementation is set for Q2 2026.

* Zero Trust architecture: The company is adopting a Zero trust security model, requiring continuous verification of every user and device accessing its network.

* Privileged Access Management (PAM): Implementation of a robust PAM system to tightly control access to sensitive systems and data.

2. Advanced Threat Detection & Response:

* AI-powered Security Analytics: AVIFY is investing in AI-driven security analytics platforms to proactively identify and respond to threats in real-time. This includes anomaly detection and behavioral analysis.

* Security Information and Event Management (SIEM) Upgrade: A significant upgrade to its SIEM system to improve threat visibility and incident response capabilities.

* Expanded threat Intelligence Feeds: Subscription to multiple threat intelligence feeds to stay ahead of emerging threats.

3. Infrastructure Modernization & Resilience:

* Cloud Security Posture Management (CSPM): Enhanced CSPM tools to continuously monitor and improve the security configuration of its cloud environments.

* Network Segmentation: Further segmentation of its network to limit the blast radius of potential attacks.

* Disaster Recovery & Business Continuity: Review and enhancement of its disaster recovery and business continuity plans to ensure service resilience.

Real-World Example: Lessons from the SolarWinds Attack

Vance specifically referenced the 2020 SolarWinds supply chain attack as a cautionary tale, emphasizing the importance of proactive security measures and continuous monitoring. “The SolarWinds incident demonstrated the devastating consequences of a compromised supply chain,” she stated. “We are taking steps to rigorously vet our third-party vendors and implement robust security controls throughout our ecosystem.” AVIFY has initiated a comprehensive vendor risk management program, requiring all critical vendors to undergo regular security assessments.

Benefits of AVIFY’s Security Investments

The long-term benefits of these investments extend beyond mitigating risk. AVIFY anticipates:

* Increased Customer Trust: Demonstrating a commitment to security will enhance customer trust and loyalty.

* Competitive Advantage: A strong security posture will differentiate AVIFY from competitors in a market increasingly focused on data protection.

* Reduced Insurance premiums: Improved security controls