We would like to clarify on the process followed for the AIS campaign. As you are well aware, we had the client live event on Aug 24th 2016. Given the complexity of the creative design, we managed to finish the development on time with all the last minute changes. Many team members stayed back in office till late hours to finish the development. The event went well and I think it is safe to assume that the client was very happy with our work. Please note that such a complex creative normally takes around 10 - 15 days for development & testing but we had to finish it in 2 days under pressure. We went out of our way to accommodate the client's request. Please also note that creative design and development is done only for campaigns which will be run on InMobi network, but given the situation with the client, we had agreed to share only the creative for the event.
Post this event, we again made changes to the creative based on the client's feedback and took the campaign live on our network on Sep 1st. We made sure that the campaign was delivered completely with above average CTR. We got close to 1500 leads which is a very good sign our creative performance and campaign delivery. Please also note that we did not face any issues during the campaign period - Sep 1st - Sep 15th.
This incident is indeed unfortunate and a force majeure event since cyber attacks such as this, are outside the reasonable control of any party and is a risk associated with any code development. However, once the issue was brought to our notice, we implemented immediate measures at our end to mitigate. Given the stringent deadlines and the complex requirement, we had to be focused on delivering on time to make the client's event a success and certain proactive measures which we would have otherwise pushed for during the development life cycle could not be undertaken.
We are committed to implement generally accepted industry practices and towards our endevour to prevent the recurrence of such instance, we are taking the following remediation measures:
1. Additional data encryption mechanism
2. We will try to ensure that all due life-cycle processes are followed without exception for all requirement(s). While this is a regular process, we could not complete certain code review for this requirement due to tight deadlines.We would also require assistance from you to provide us sufficient time to finish all our due processes
3. We are also undertaking IT infrastructure changes to add additional layers of security to avoid any external hacks.
We value your relationship and therefore we are willing to accept a reduced amount of 225,000 THB. in good faith and sincerely hope that we are able to start afresh. Let us focus on moving past this issue and working together in the future with better cooperation and planning on both sides."