KUALA LUMPUR: The National Cyber Security Agency (Nacsa) has launched an investigation into reports of a massive data breach involving MyKad details of 17 million Malaysians, allegedly being sold on the dark web.
The media reported that Nacsa had deployed its team of experts to verify the allegations and assess the scale of the potential data compromise.
"Nacsa remains steadfast in protecting personal data and will take appropriate action based on our findings," it said in a statement.
In the meantime, Nacsa has urged the public to closely monitor their bank accounts and credit reports for any unusual activity.
The public has also been reminded to exercise caution when dealing with unsolicited messages, especially those containing links or attachments from unfamiliar sources.
The issue first gained widespread attention on social media yesterday, where alleged hackers posted images of MyKads on the dark web as proof of their claims.
Nacsa also reminded the public not to share unverified information regarding the breach.
"The public is advised not to disseminate any unverified details about the alleged data leak," the agency stressed.
Personal data security has been a recurring concern in Malaysia.
Digital Minister Gobind Singh Deo had previously pledged a comprehensive review of data protection measures, following calls to hold the government accountable for breaches involving official agencies.
He revealed that the Personal Data Protection Commissioner's office had received reports of leaks from several government bodies, including the police, Bank Negara Malaysia, and the Malaysian Communications and Multimedia Commission.
Past incidents highlight the severity of such breaches.
where sensitive information such as MyKad numbers, salaries, addresses, and phone numbers was exposed by hackers.
In August this year, more than 300GB of confidential data belonging to Prasarana Malaysia Bhd was reportedly leaked.
The cybercriminal group RansomHub claimed responsibility, demanding an undisclosed ransom from the public transport operator.