Health Ministry reports cyber breach at facility, services unaffected

On November 12, a cyber incident occurred at a Health Ministry facility that involved unauthorized access to a file storage and sharing platform, according to the ministry. However, the ministry clarified that this breach did not disrupt healthcare services, as the main databases remained unencrypted. The incident was contained to a supporting file storage and sharing platform at one of the ministry's facilities.

The Ministry's Computer Security Incident Response Team conducted a preliminary investigation, which found that the breach did not compromise the main operating systems or health services. In response, the ministry promptly implemented additional security measures, such as blocking public access to the affected platform, resetting user passwords, auditing servers, and enforcing multi-factor authentication.

The ministry emphasized that all main operating systems, as well as health services and patient treatments, remain unaffected and are operating as usual, allowing the public to continue with health appointments and treatments at ministry facilities without concern. The ministry further stated that it would continue collaborating closely with the National Cyber Security Agency, as mandated by the Cyber Security Act 2024, and carry out continuous monitoring of potential threats.

It is important to note that downloading, possessing, or spreading official government documents obtained illegally is considered a serious offense and may lead to legal action. The ministry remains committed to safeguarding its information technology infrastructure and the confidentiality of public health data. This statement follows the government's decision to raise the National Cyber Threat Level from low to moderate on November 4, despite Prime Minister Anwar Ibrahim's earlier assurance that Malaysia was not a targeted country for cyberattacks.