Tabung Haji systems resume after cyberattack, depositors’ savings confirmed safe

KUALA LUMPUR - The key systems and services of Lembaga Tabung Haji (TH), the country’s mandatory retirement savings organization, have resumed normal operations following a brief suspension caused by a cyberattack on October 8th. In a statement, TH confirmed that depositors' savings remain secure, stating that comprehensive security checks, control enhancement, and system recovery measures led to the reactivation of the systems.

TH branches in Kedah, Terengganu, and Kelantan were among the first to resume operations on the previous day, while branches nationwide opened as usual on October 9th. Services provided through strategic banking partners have also been reactivated. The statement reassured depositors that TH is closely monitoring the situation and taking further security enhancements to ensure the continued safe and smooth operation of the reactivated systems.

The cyberattack on October 8th led to a temporary suspension of TH's systems and services across all channels in order to protect depositors' savings and personal information. In response, TH worked with external experts and national cybersecurity authorities to investigate the incident and restore the systems. TH described the attack as a criminal act against the organization and the nation, and promptly reported the event to the police, the National Cyber Security Agency (NACSA), and the Department of Personal Data Protection (JPDP).

However, despite the restoration of most services, TH noted that the three functions of the THiJARI platform – password resets, new user registration, and online account opening – remain under restoration. The agency informed depositors that updates on this matter would be communicated through TH's official channels.

TH continues to closely monitor the systems and services for any abnormal activities and urges depositors who notice unusual transactions or need assistance to immediately contact the TH Contact Centre (THCC) at 03-6207 1919. The organization expressed gratitude towards depositors for their patience and cooperation during the restoration period, while apologizing for the incident that occurred.