Tabung Haji Core Services And Systems Restored Following Cyberattack; Depositors’ Savings Confirmed Safe

Lembaga Tabung Haji has announced that its main systems and services have returned to normal following a cyberattack last week. The institution confirmed that depositors' savings remain secure. In a post on its social media, Tabung Haji explained that the systems were restored after conducting thorough safety checks, reinforcing controls, and implementing recovery measures.

The statement emphasized that continuous monitoring and security upgrades will be in place to ensure the stable operation of the restored systems. On 7 October 2026, Tabung Haji detected suspicious cyber activity and suspended its depositors' services for precautionary reasons. The agency worked with external experts and national cybersecurity bodies to tackle the issue.

Following the criminal attack, Tabung Haji reported the incident to the police and informed the National Cyber Security Agency (NACSA) and the Department of Personal Data Protection (JPDP). Branches in Kedah, Terengganu, and Kelantan resumed operations on 11 October 2026, while services in other regions opened as normal. Strategic banking partners' services also returned to normal.

However, some users reported ongoing issues accessing Tabung Haji services via their banking apps like MAE. While some functions on the THiJARI platform remain inaccessible, including password resets, new user registration, and online account opening, Tabung Haji stated that additional restoration work is required before these services can be reactivated.

Depositors are advised to report any unusual transactions to the Tabung Haji Contact Centre at 03-6207 1919 or through their official communication channels.