Logo of Phnom Penh Post newspaper Phnom Penh Post - Data of 22.5M Malaysians born 1940-2004 ‘sold for $10K’



Data of 22.5M Malaysians born 1940-2004 ‘sold for $10K’

Content image - Phnom Penh Post
In both incidents, it was claimed that the data was syphoned from the NRD through the My Identity API. AFP

Data of 22.5M Malaysians born 1940-2004 ‘sold for $10K’

An alleged data leak containing the information of 22.5 million Malaysians born between 1940 and 2004, purportedly stolen from the National Registration Department (NRD), has once again put the country’s data security measures in the spotlight.

Local tech portal Amanz reported that the database, 160GB in size, is being sold for $10,000 on the dark web.

In the screenshot shared by the portal, the seller claimed that this is an expanded database compared to the one he sold in September last year, which was only up to 1998.

In both incidents, it was claimed that the data was siphoned from the NRD through the MyIdentity API (application programming interface). MyIdentity is a centralised data-sharing platform that is used by various government agencies.

Malaysia’s Home Minister Hamzah Zainudin on Wednesday said the alleged data leak did not come from the NRD, but from “several agencies which we have given some leeway for them to obtain information from us”.

He did not name those agencies, or how many agencies had access to MyIdentity data.

Hamzah told reporters after attending an event that there was a mechanism in place which could prove that the leaked information did not come from the NRD.

“Previously, there was a similar allegation but we have managed to prove that the leak was not from the NRD.

“It was from several agencies which we have given some leeway for them to obtain information from us,” he said.

When the first data leak occurred was discovered in September, it allegedly involved the NRD database of people born between 1979 and 1998, and was being sold for 0.2 BTC ($8,000).

But Datuk Seri Hamzah said then: “Don’t worry about data held by NRD. Our firewall is quite strong.”

He said then that all government agencies using the MyIdentity system had been instructed to implement stricter safety measures.

On Wednesday, lawyer Foong Cheng Leong said the lack of transparency on investigations related to data leaks in Malaysia has been frustrating.

“There needs to be an account of how the matter is being investigated and what steps are being taken to ensure that the data is secure.

“The information could serve as a deterrent to others and show that there will be consequences for those leaking private information,” he said in a phone interview.

Mr Foong urged fresh investigations to be conducted by the relevant agencies, including the Department of Personal Data Protection (JPDP) to discover if the leak was genuine.

When contacted, JPDP declined to comment at this point.

Mr Foong said the data from the alleged leak could be used by scammers to dupe victims.

“For example, they could pose as an authority figure and present information such as your MyKad number or address to gain your trust.

“They will use this to convince you to give out more details or perform financial transactions,” he said.

When contacted, CyberSecurity Malaysia declined to comment, stating that the matter is under the jurisdiction of JPDP.

And the NRD has yet to respond to requests for information.

THE STAR (MALAYSIA)/ASIA NEWS NETWORK

MOST VIEWED

  • Hong Kong firm done buying Coke Cambodia

    Swire Coca-Cola Ltd, a wholly-owned subsidiary of Hong Kong-listed Swire Pacific Ltd, on November 25 announced that it had completed the acquisition of The Coca-Cola Co’s bottling business in Cambodia, as part of its ambitions to expand into the Southeast Asian market. Swire Coca-Cola affirmed

  • Cambodia's Bokator now officially in World Heritage List

    UNESCO has officially inscribed Cambodia’s “Kun Lbokator”, commonly known as Bokator, on the World Heritage List, according to Minister of Culture and Fine Arts Phoeurng Sackona in her brief report to Prime Minister Hun Sen on the night of November 29. Her report, which was

  • NagaWorld union leader arrested at airport after Australia trip

    Chhim Sithar, head of the Labour Rights Supported Union of Khmer Employees at NagaWorld integrated casino resort, was arrested on November 26 at Phnom Penh International Airport and placed in pre-trial detention after returning from a 12-day trip to Australia. Phnom Penh Municipal Court Investigating Judge

  • Sub-Decree approves $30M for mine clearance

    The Cambodian government established the ‘Mine-Free Cambodia 2025 Foundation’, and released an initial budget of $30 million. Based on the progress of the foundation in 2023, 2024 and 2025, more funds will be added from the national budget and other sources. In a sub-decree signed by Prime Minister Hun Sen

  • Two senior GDP officials defect to CPP

    Two senior officials of the Grassroots Democratic Party (GDP) have asked to join the Cambodian People’s Party (CPP), after apparently failing to forge a political alliance in the run-up to the 2023 general election. Yang Saing Koma, chairman of the GDP board, and Lek Sothear,

  • 11th Chaktomuk Short Film Festival draws to close

    Cambodia's 11th Chaktomuk Short Film Festival wrapped up successfully on November 28 after a four-day run, with the film “Voice of the Night” awarded top prize for 2022. Sum Sithen, the organiser of the short film festival, told The Post that the number of attendees to the