PERKESO Rehabilitation Centre, Malaysia

The social security agency of Malaysia, Perkeso, has confirmed a cyberattack on its networks in a statement.

It promised that the planned hacker attacks would not interfere with its capacity to serve the public, employers, and Socso contributors.

Along with sample data, the organisation exchanged personal information such as full names, IC numbers, phone numbers, salaries, company names, and blood types.

Perkeso's ICT team stated that the hackers had changed their strategy and was attacking the company with character assassination attempts once they were able to take back control.

Source: https://www.malaymail.com/news/malaysia/2023/12/08/socso-confirms-cyberattack-claims-leaked-data-is-questionable-and-incomplete/106563

TPRM report: https://scoringcyber.rankiteo.com/company/rehabmalaysia

"id": "per23384224",
"linkid": "rehabmalaysia",
"type": "Breach",
"date": "12/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Social Security',
                        'location': 'Malaysia',
                        'name': 'Perkeso',
                        'type': 'Government Agency'}],
 'data_breach': {'personally_identifiable_information': True,
                 'type_of_data_compromised': ['full names',
                                              'IC numbers',
                                              'phone numbers',
                                              'salaries',
                                              'company names',
                                              'blood types']},
 'description': 'The social security agency of Malaysia, Perkeso, has '
                'confirmed a cyberattack on its networks in a statement. It '
                'promised that the planned hacker attacks would not interfere '
                'with its capacity to serve the public, employers, and Socso '
                'contributors. Along with sample data, the organisation '
                'exchanged personal information such as full names, IC '
                'numbers, phone numbers, salaries, company names, and blood '
                "types. Perkeso's ICT team stated that the hackers had changed "
                'their strategy and was attacking the company with character '
                'assassination attempts once they were able to take back '
                'control.',
 'impact': {'data_compromised': ['full names',
                                 'IC numbers',
                                 'phone numbers',
                                 'salaries',
                                 'company names',
                                 'blood types']},
 'title': 'Cyberattack on Perkeso',
 'type': 'Data Breach'}