Customer stories / IST Malaysia
IST Malaysia, a Kuala Lumpur dive equipment retailer, uses nPro DLP on its own servers to stop card numbers and customer data leaving staff computers.
“We take orders through our web store, Shopee, Lazada and WhatsApp, so card and customer details pass through our team's screens every day. nPro DLP checks for card numbers on our own servers, stops them being copied or uploaded out, and logs anything it flags.”
•••• •••• •••• 4242
Customer card
Card number on clipboard
Detector: credit_card (checksum valid)
Logged on IST's own server
Order export to personal cloud
Illustration, not real IST Malaysia data.
The challenge
Taken during orders and payments across the store, web shop, Shopee, Lazada and WhatsApp, often under time pressure.
Names, delivery addresses and phone numbers from every channel, all covered by the PDPA's 72-hour breach reporting rule.
Price lists and margins for instructors and dive centres that competitors would like to see.
The solution
nPro DLP checks every number against the card checksum, so real card numbers are caught and most other long numbers, like order IDs, are not. It runs on IST Malaysia's own servers, watching the clipboard, cloud uploads, USB drives and screenshots.
The results
Stopped before they are copied, uploaded or saved to USB.
Store, web, marketplace and WhatsApp orders.
Every flagged event logged on IST's own servers.
No card data sent to a third-party cloud.
nPro DLP helps keep card data from leaving endpoints. It is one part of PCI DSS compliance, not a replacement for it.
Find out in 30 days. Monitor mode only, nothing blocked, nothing leaves your network.
Book a free auditPublished 22 October 2026. IST Malaysia's name is used with permission.