Not Just Data Theft: NACSA Warns Cybercriminals Could Target M’sia’s Water, Electricity & Healthcare Systems

The nature of digital threats is evolving into something far more disruptive to everyday society.

The National Cyber Security Agency (NACSA) has issued a critical warning that cybercriminals are shifting their focus beyond mere data theft, increasingly aiming to cripple public infrastructure and disrupt the daily lives of everyday citizens.

Targeting critical infrastructure: Water, healthcare, and energy systems at risk

Bernama  reported that, NACSA Chief Executive Officer Dr Megat Zuhairy Megat Tajuddin highlighted that Malaysia is not immune to these escalating threats, particularly regarding industrial control systems across vital sectors like healthcare, water supply, energy, and national supply chains.

Citing recent high-profile incidents in Europe, where cyberattacks successfully paralysed supermarket operations and blood bank refrigeration systems, Dr. Megat Zuhairy emphasised that modern attacks are deliberately engineered to cause widespread chaos in basic public services.

“Its capability has increased the scale, speed, and intensity of cyberattacks worldwide, and Malaysia, like other countries, is not exempt from the risk of facing the same modus operandi,” Dr. Megat Zuhairy told Bernama, noting that advancements in Artificial Intelligence (AI) allow threat actors to launch automated, simultaneous attacks on multiple organisations.

He added that operational technology (OT) systems within strategic sectors remain highly vulnerable if directly connected to the internet without proper defense mechanisms.

For illustration purposes only

What organisations and the public can do

In response to these growing threats, NACSA urges all National Critical Information Infrastructure (NCII) entities to isolate critical operating systems from external networks and continually update their service continuity plans.

From a regulatory standpoint, entities are bound by the Cybersecurity Act 2024 (Act 854) to comply with rigorous security standards. Meanwhile, non-NCII organizations are guided by NACSA’s cybersecurity threat preparedness frameworks.

Addressing the National Security Council’s (MKN) recent decision to raise the National Cyber Security Threat Level (NCTL) from Low to Medium, Dr. Megat Zuhairy clarified that the adjustment is a proactive precaution rather than an indicator of an active national crisis.

“Cybersecurity is a shared responsibility, and every individual can contribute by practicing proper security measures and refraining from spreading unverified information,” he reminded.

How do you protect your personal data from evolving online threats? Share your cybersecurity tips in the comments below!

Also read: “They can be prosecuted” – Zahid Hamidi Says Foreign Cybercriminals Could Be Extradited To M’sia For Targeting Locals