A new and serious claim of a data breach is circulating online, with a hacker alleging to have compromised a number of Malaysian government websites. The hacker, who goes by the handle “R00T,” claims to have breached over a dozen government sites and accessed sensitive personal information. This incident, while still under investigation, is raising significant concerns about the state of cybersecurity in the public sector.

The Alleged Breach and Data
The hacker first posted a list of the purportedly compromised websites on social media, including those belonging to the Ministry of Health, the Ministry of Agriculture and Food Security, and the Malaysian Immigration Department. The claim also includes a list of data that was allegedly leaked, which includes personal details such as names, NRIC numbers, phone numbers, and addresses. These claims are particularly concerning as they involve sensitive data that could be used for various malicious purposes.

The Official Response
Following the claims, both the National Cyber Security Agency (NACSA) and the Department of the Director General of Public Works have confirmed that they are investigating the matter. The Malaysian Communications and Multimedia Commission (MCMC) is also monitoring the situation closely. While the investigation is ongoing, authorities have not yet confirmed the authenticity of the hacker’s claims or the alleged data leak.
A History of Incidents
This is not the first time a hacker has claimed to have breached Malaysian government systems. A similar incident occurred in 2024, where a hacker claimed to have accessed sensitive data from various government agencies. These recurring claims highlight the ongoing cybersecurity challenges faced by the public sector and the need for a more robust and proactive approach to digital security.
As the investigation continues, it remains to be seen whether the hacker’s claims are legitimate. However, the incident serves as a stark reminder of the importance of cybersecurity in today’s digital world, especially for government agencies that handle the personal information of millions of citizens.