Tabung Haji services back following cyberattack

Tabung Haji, the national pilgrimage fund of Malaysia, has announced the resumption of its services after falling victim to a cyberattack on October 7. The incident prompted the fund to temporarily suspend operations, reassuring depositors that their savings remain secure. The Tabung Haji (TH) statement clarified that it had reported the matter to the relevant authorities, including the police, National Cyber Security Agency, and the personal data protection department.

TH assured the public that its core systems and services have returned to normal following thorough security checks, the implementation of enhanced controls, and system recovery measures. The fund emphasized that continuous monitoring and improved security protocols would be in place to maintain the safety and smooth functioning of its operations.

In the wake of the attack, Tabung Haji took immediate action by suspending its services on October 8 as a precautionary measure. The fund expressed its regret over the criminal act targeting its systems and services, which sought to disrupt its activities. Depositors were apologized to for the inconvenience caused by the service disruption.

TH's internal teams collaborated with external experts and national cybersecurity authorities to investigate the incident, mitigate the threat, and restore its systems. Branches in Kedah, Terengganu, and Kelantan resumed operations on Sunday, while other branches returned to normal service today. However, certain functions on TH's strategic banking partners, THiJARI, and its official online portal and mobile application were impacted.

These services, including password resets, new user registrations, and online account openings, require additional recovery processes before they can be fully reactivated. TH committed to providing regular updates through its official communication channels.