It was reported that yesterday, a database leak that contained four million data entries belonging to Malaysians was put on sale for RM35,500 at a well-known marketplace forum. The leaked database reportedly involved the National Registration Department (JPN) as well as the Inland Revenue Board (LHDN).
The seller claimed that the data was from JPN but acquired through LHDN’s website using myIDENTITY’s API and it was listed on the marketplace for 0.2 BTC.
LHDN has now since issued a statement and refuted the claim that its website was the source of the database leak and insisted that it was merely just a user of myIDENTITY but does not own the platform.
In their statement, they insisted that all of the data and information under its custody is safe and protected by “recognised data security technology”.
Furthermore, the board revealed that its own internal investigation showed that there was no leak of data and information at its end. They are currently working together with JPN, NACSA, and the National Security Council to go through all the possibilities in regards to the said database.
It was also reported by BERNAMA that the Royal Malaysian Police (PDRM) have begun to investigate the database leak. According to the Director of PDRM’s Commercial Crime Investigation Department, CP Mohd Kamarudin Md Din, a police report regarding the incident has been filed at Putrajaya by the Deputy Director of JPN and the case is currently being investigated under Section 4(1) of Computer Crimes Act 199.
CP Kamarudin said that a thorough investigation will be carried out in collaboration with the Malaysian Communications and Multimedia Commission, CyberSecurity Malaysia, and National Cyber Security Agency (NACSA).
PDRM has also reportedly made the first move by attempting to block the sale of the database but the listing appears to still be on the marketplace forum as of 10.00 am today (29 September).
How did this all start?
The issue was first highlighted by local Intrusion Analyst, Adnan Shukor, via a Twitter post. He noted that the important information of Malaysians such as their full name, NRIC number, mailing & permanent addresses, mobile number, and e-mail address were all included as part of the data. To make matters worse, there are also images present in the database which was grouped according to each individual’s birth year, ranging from 1979 to 1998.
The data was said to be in 19 different files and sample images of the database provided by the seller showed the information of about 60 individuals which contained all of their personal information.
The seller which according to their profile is based in, Puchong, Selangor, claimed that the total data is of four million Malaysians which is equal to 31.8GB. They also claimed that it was leaked via myIDENTITY API, which is essentially the national data-sharing platform for the public sector that allows government agencies to obtain one’s personal details from a centralised repository. 10 agencies including both JPN and LHDN are currently linked to the platform which first went live in June 2012.
Worryingly enough, there have been a number of inquiries to the listing by potential buyers.
We hope that the listing gets brought down promptly and that a complete investigation is conducted on how the database was leaked in the first place. Let us also do our part to keep our data safe from potential leaks such as this.
What do you think of this? Let us know in the comments.
Woman Allegedly Jumps To Death From Klang Parade, Exact Same Spot Another Woman Died 2 Years Ago
Disclaimer: This article contains elements of suicide that some readers may find disturbing. Reader discretion is advised. A couple of...
Two Drivers Arrested For ‘Bullying’ Each Other On Jalan Kuching, Myvi Driver Tests Positive For Drugs
Two drivers were seen behaving recklessly on the road in a road bullying incident, posing a potential danger to other...
Otoniel: Biggest Narco Since Pablo Escobar Captured
Dairo Antonio Usuga also known as Otoniel is the leader of the Gulf Clan and Colombia’s most wanted drug trafficker...
No Political Gatherings During Melaka State Elections
As the state of Melaka gears up for the state elections, the Health Ministry has issued a bad on political...
Suhakam: 1,158 Nepali Workers Have Died In Malaysia From 2018 To July 2021
The Malaysian Human Rights Commission (Suhakam) was prompted to investigate a report by the Nepal Embassy that reveals the increasing...
S’pore Eases Quarantine Restrictions For M’sians, Only 10 Days Quarantine At Home
As announced by the Ministry of Health Singapore on Saturday (Oct 23), the republic will be reopening its borders to...
Large Boulder Falls & Hits A Car In Balik Pulau, Fortunately No One Was Hurt
A car driver narrowly escaped death after the car he was driving was hit by a boulder that rolled down...
KJ Wants People To Put Their Face Masks On After Eating
If worn properly, wearing a face mask helps prevent the spread of Covid-19 – we ALL know this. But ever...
People22 hours ago
Wildlife Department Takes Away YouTuber’s Tarantula Collection Without Warrant, Returns It With One Dead
Social Stories22 hours ago
M’sian YouTuber Allegedly Pranks Rider To Deliver Food To Memorial Park, Sends RM5k To Apologise
Social Stories17 hours ago
Watch: Man Teaching His Daughter Badminton Leaves Netizens At Awe
Social Stories17 hours ago
Hiker Postpones Nature Walk To Pick Up Trash Left By Others